Workspace Connections - List Secrets

Service:: Machine Learning

API Version:: 2025-09-01

List all the secrets of a machine learning workspaces connections.

POST https://management.azure.com/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.MachineLearningServices/workspaces/{workspaceName}/connections/{connectionName}/listsecrets?api-version=2025-09-01

URI Parameters

Name	In	Required	Type	Description
connectionName	path	True	string pattern: ^[a-zA-Z0-9][a-zA-Z0-9_-]{2,32}$	Friendly name of the workspace connection
resourceGroupName	path	True	string minLength: 1 maxLength: 90	The name of the resource group. The name is case insensitive.
subscriptionId	path	True	string minLength: 1	The ID of the target subscription.
workspaceName	path	True	string pattern: ^[a-zA-Z0-9][a-zA-Z0-9_-]{2,32}$	Name of Azure Machine Learning workspace.
api-version	query	True	string minLength: 1	The API version to use for this operation.

Responses

Name	Type	Description
200 OK	WorkspaceConnectionPropertiesV2BasicResource	The request was successful; the request was well-formed and received properly.
Other Status Codes	ErrorResponse	Error

Security

azure_auth

Azure Active Directory OAuth2 Flow.

Type: oauth2
Flow: implicit
Authorization URL: https://login.microsoftonline.com/common/oauth2/authorize

Scopes

Name	Description
user_impersonation	impersonate your user account

Examples

GetWorkspaceConnection

Sample request

HTTP

POST https://management.azure.com/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/test-rg/providers/Microsoft.MachineLearningServices/workspaces/workspace-1/connections/connection-1/listsecrets?api-version=2025-09-01

Sample response

Status code:: 200

{
  "id": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/resourceGroup-1/providers/Microsoft.MachineLearningServices/workspaces/workspace-1/connections/connection-1",
  "name": "connection-1",
  "type": "Microsoft.MachineLearningServices/workspaces/connections",
  "properties": {
    "authType": "AccessKey",
    "credentials": {
      "accessKeyId": "some_string",
      "secretAccessKey": "some_string"
    },
    "category": "CustomKeys",
    "expiryTime": "2020-01-01T00:00:00Z",
    "target": "some_string",
    "metadata": {}
  },
  "systemData": {
    "createdAt": "2020-01-01T00:00:00Z",
    "createdBy": "some_string",
    "createdByType": "ManagedIdentity",
    "lastModifiedAt": "2020-01-01T00:00:00Z",
    "lastModifiedBy": "some_string",
    "lastModifiedByType": "User"
  }
}

Definitions

Name	Description
AADAuthTypeWorkspaceConnectionProperties	This connection type covers the AAD auth for any applicable Azure service
AccessKeyAuthTypeWorkspaceConnectionProperties
AccountKeyAuthTypeWorkspaceConnectionProperties	This connection type covers the account key connection for Azure storage
ApiKeyAuthWorkspaceConnectionProperties	This connection type covers the generic ApiKey auth connection categories, for examples: AzureOpenAI: Category:= AzureOpenAI AuthType:= ApiKey (as type discriminator) Credentials:= {ApiKey} as Microsoft.MachineLearning.AccountRP.Contracts.WorkspaceConnection.ApiKey Target:= {ApiBase} CognitiveService: Category:= CognitiveService AuthType:= ApiKey (as type discriminator) Credentials:= {SubscriptionKey} as Microsoft.MachineLearning.AccountRP.Contracts.WorkspaceConnection.ApiKey Target:= ServiceRegion={serviceRegion} CognitiveSearch: Category:= CognitiveSearch AuthType:= ApiKey (as type discriminator) Credentials:= {Key} as Microsoft.MachineLearning.AccountRP.Contracts.WorkspaceConnection.ApiKey Target:= {Endpoint} Use Metadata property bag for ApiType, ApiVersion, Kind and other metadata fields
ConnectionAuthType	Authentication type of the connection target
ConnectionCategory	Category of the connection
ConnectionGroup	Group based on connection category
createdByType	The type of identity that created the resource.
CustomKeys	Custom Keys credential object
CustomKeysWorkspaceConnectionProperties	Category:= CustomKeys AuthType:= CustomKeys (as type discriminator) Credentials:= {CustomKeys} as Microsoft.MachineLearning.AccountRP.Contracts.WorkspaceConnection.CustomKeys Target:= {any value} Use Metadata property bag for ApiVersion and other metadata fields
ErrorAdditionalInfo	The resource management error additional info.
ErrorDetail	The error detail.
ErrorResponse	Error response
ManagedIdentityAuthTypeWorkspaceConnectionProperties
NoneAuthTypeWorkspaceConnectionProperties
OAuth2AuthTypeWorkspaceConnectionProperties
PATAuthTypeWorkspaceConnectionProperties
SASAuthTypeWorkspaceConnectionProperties
ServicePrincipalAuthTypeWorkspaceConnectionProperties
systemData	Metadata pertaining to creation and last modification of the resource.
UsernamePasswordAuthTypeWorkspaceConnectionProperties
ValueFormat	format for the workspace connection value
WorkspaceConnectionAccessKey
WorkspaceConnectionAccountKey
WorkspaceConnectionApiKey	Api key object for workspace connection credential.
WorkspaceConnectionManagedIdentity
WorkspaceConnectionOAuth2	ClientId and ClientSecret are required. Other properties are optional depending on each OAuth2 provider's implementation.
WorkspaceConnectionPersonalAccessToken
WorkspaceConnectionPropertiesV2BasicResource
WorkspaceConnectionServicePrincipal
WorkspaceConnectionSharedAccessSignature
WorkspaceConnectionUsernamePassword

AADAuthTypeWorkspaceConnectionProperties

Object

This connection type covers the AAD auth for any applicable Azure service

Name	Type	Description
authType	string: AAD	Authentication type of the connection target
category	ConnectionCategory	Category of the connection
createdByWorkspaceArmId	string (arm-id)
expiryTime	string (date-time)
group	ConnectionGroup	Group based on connection category
isSharedToAll	boolean
metadata	object	Store user metadata for this connection
sharedUserList	string[]
target	string
value	string	Value details of the workspace connection.
valueFormat	ValueFormat	format for the workspace connection value

AccessKeyAuthTypeWorkspaceConnectionProperties

Object

Name	Type	Description
authType	string: AccessKey	Authentication type of the connection target
category	ConnectionCategory	Category of the connection
createdByWorkspaceArmId	string (arm-id)
credentials	WorkspaceConnectionAccessKey
expiryTime	string (date-time)
group	ConnectionGroup	Group based on connection category
isSharedToAll	boolean
metadata	object	Store user metadata for this connection
sharedUserList	string[]
target	string
value	string	Value details of the workspace connection.
valueFormat	ValueFormat	format for the workspace connection value

AccountKeyAuthTypeWorkspaceConnectionProperties

Object

This connection type covers the account key connection for Azure storage

Name	Type	Description
authType	string: AccountKey	Authentication type of the connection target
category	ConnectionCategory	Category of the connection
createdByWorkspaceArmId	string (arm-id)
credentials	WorkspaceConnectionAccountKey
expiryTime	string (date-time)
group	ConnectionGroup	Group based on connection category
isSharedToAll	boolean
metadata	object	Store user metadata for this connection
sharedUserList	string[]
target	string
value	string	Value details of the workspace connection.
valueFormat	ValueFormat	format for the workspace connection value

ApiKeyAuthWorkspaceConnectionProperties

Object

This connection type covers the generic ApiKey auth connection categories, for examples: AzureOpenAI: Category:= AzureOpenAI AuthType:= ApiKey (as type discriminator) Credentials:= {ApiKey} as Microsoft.MachineLearning.AccountRP.Contracts.WorkspaceConnection.ApiKey Target:= {ApiBase}

CognitiveService: Category:= CognitiveService AuthType:= ApiKey (as type discriminator) Credentials:= {SubscriptionKey} as Microsoft.MachineLearning.AccountRP.Contracts.WorkspaceConnection.ApiKey Target:= ServiceRegion={serviceRegion}

CognitiveSearch: Category:= CognitiveSearch AuthType:= ApiKey (as type discriminator) Credentials:= {Key} as Microsoft.MachineLearning.AccountRP.Contracts.WorkspaceConnection.ApiKey Target:= {Endpoint}

Use Metadata property bag for ApiType, ApiVersion, Kind and other metadata fields

Name	Type	Description
authType	string: ApiKey	Authentication type of the connection target
category	ConnectionCategory	Category of the connection
createdByWorkspaceArmId	string (arm-id)
credentials	WorkspaceConnectionApiKey	Api key object for workspace connection credential.
expiryTime	string (date-time)
group	ConnectionGroup	Group based on connection category
isSharedToAll	boolean
metadata	object	Store user metadata for this connection
sharedUserList	string[]
target	string
value	string	Value details of the workspace connection.
valueFormat	ValueFormat	format for the workspace connection value

ConnectionAuthType

Enumeration

Authentication type of the connection target

Value	Description
PAT
ManagedIdentity
UsernamePassword
None
SAS
AccountKey
ServicePrincipal
AccessKey
ApiKey
CustomKeys
OAuth2
AAD

ConnectionCategory

Enumeration

Category of the connection

Value	Description
PythonFeed
ContainerRegistry
Git
S3
Snowflake
AzureSqlDb
AzureSynapseAnalytics
AzureMySqlDb
AzurePostgresDb
ADLSGen2
Redis
ApiKey
AzureOpenAI
AIServices
CognitiveSearch
CognitiveService
CustomKeys
AzureBlob
AzureOneLake
CosmosDb
CosmosDbMongoDbApi
AzureDataExplorer
AzureMariaDb
AzureDatabricksDeltaLake
AzureSqlMi
AzureTableStorage
AmazonRdsForOracle
AmazonRdsForSqlServer
AmazonRedshift
Db2
Drill
GoogleBigQuery
Greenplum
Hbase
Hive
Impala
Informix
MariaDb
MicrosoftAccess
MySql
Netezza
Oracle
Phoenix
PostgreSql
Presto
SapOpenHub
SapBw
SapHana
SapTable
Spark
SqlServer
Sybase
Teradata
Vertica
Pinecone
Cassandra
Couchbase
MongoDbV2
MongoDbAtlas
AmazonS3Compatible
FileServer
FtpServer
GoogleCloudStorage
Hdfs
OracleCloudStorage
Sftp
GenericHttp
ODataRest
Odbc
GenericRest
AmazonMws
Concur
Dynamics
DynamicsAx
DynamicsCrm
GoogleAdWords
Hubspot
Jira
Magento
Marketo
Office365
Eloqua
Responsys
OracleServiceCloud
PayPal
QuickBooks
Salesforce
SalesforceServiceCloud
SalesforceMarketingCloud
SapCloudForCustomer
SapEcc
ServiceNow
SharePointOnlineList
Shopify
Square
WebTable
Xero
Zoho
GenericContainerRegistry
Elasticsearch
OpenAI
Serp
BingLLMSearch
Serverless
ManagedOnlineEndpoint

ConnectionGroup

Enumeration

Group based on connection category

Value	Description
Azure
AzureAI
Database
NoSQL
File
GenericProtocol
ServicesAndApps

createdByType

Enumeration

The type of identity that created the resource.

Value	Description
User
Application
ManagedIdentity
Key

CustomKeys

Object

Custom Keys credential object

Name	Type	Description
keys	object

CustomKeysWorkspaceConnectionProperties

Object

Category:= CustomKeys AuthType:= CustomKeys (as type discriminator) Credentials:= {CustomKeys} as Microsoft.MachineLearning.AccountRP.Contracts.WorkspaceConnection.CustomKeys Target:= {any value} Use Metadata property bag for ApiVersion and other metadata fields

Name	Type	Description
authType	string: CustomKeys	Authentication type of the connection target
category	ConnectionCategory	Category of the connection
createdByWorkspaceArmId	string (arm-id)
credentials	CustomKeys	Custom Keys credential object
expiryTime	string (date-time)
group	ConnectionGroup	Group based on connection category
isSharedToAll	boolean
metadata	object	Store user metadata for this connection
sharedUserList	string[]
target	string
value	string	Value details of the workspace connection.
valueFormat	ValueFormat	format for the workspace connection value

ErrorAdditionalInfo

Object

The resource management error additional info.

Name	Type	Description
info	object	The additional info.
type	string	The additional info type.

ErrorDetail

Object

The error detail.

Name	Type	Description
additionalInfo	ErrorAdditionalInfo[]	The error additional info.
code	string	The error code.
details	ErrorDetail[]	The error details.
message	string	The error message.
target	string	The error target.

ErrorResponse

Object

Error response

Name	Type	Description
error	ErrorDetail	The error object.

ManagedIdentityAuthTypeWorkspaceConnectionProperties

Object

Name	Type	Description
authType	string: ManagedIdentity	Authentication type of the connection target
category	ConnectionCategory	Category of the connection
createdByWorkspaceArmId	string (arm-id)
credentials	WorkspaceConnectionManagedIdentity
expiryTime	string (date-time)
group	ConnectionGroup	Group based on connection category
isSharedToAll	boolean
metadata	object	Store user metadata for this connection
sharedUserList	string[]
target	string
value	string	Value details of the workspace connection.
valueFormat	ValueFormat	format for the workspace connection value

NoneAuthTypeWorkspaceConnectionProperties

Object

Name	Type	Description
authType	string: None	Authentication type of the connection target
category	ConnectionCategory	Category of the connection
createdByWorkspaceArmId	string (arm-id)
expiryTime	string (date-time)
group	ConnectionGroup	Group based on connection category
isSharedToAll	boolean
metadata	object	Store user metadata for this connection
sharedUserList	string[]
target	string
value	string	Value details of the workspace connection.
valueFormat	ValueFormat	format for the workspace connection value

OAuth2AuthTypeWorkspaceConnectionProperties

Object

Name	Type	Description
authType	string: OAuth2	Authentication type of the connection target
category	ConnectionCategory	Category of the connection
createdByWorkspaceArmId	string (arm-id)
credentials	WorkspaceConnectionOAuth2	ClientId and ClientSecret are required. Other properties are optional depending on each OAuth2 provider's implementation.
expiryTime	string (date-time)
group	ConnectionGroup	Group based on connection category
isSharedToAll	boolean
metadata	object	Store user metadata for this connection
sharedUserList	string[]
target	string
value	string	Value details of the workspace connection.
valueFormat	ValueFormat	format for the workspace connection value

PATAuthTypeWorkspaceConnectionProperties

Object

Name	Type	Description
authType	string: PAT	Authentication type of the connection target
category	ConnectionCategory	Category of the connection
createdByWorkspaceArmId	string (arm-id)
credentials	WorkspaceConnectionPersonalAccessToken
expiryTime	string (date-time)
group	ConnectionGroup	Group based on connection category
isSharedToAll	boolean
metadata	object	Store user metadata for this connection
sharedUserList	string[]
target	string
value	string	Value details of the workspace connection.
valueFormat	ValueFormat	format for the workspace connection value

SASAuthTypeWorkspaceConnectionProperties

Object

Name	Type	Description
authType	string: SAS	Authentication type of the connection target
category	ConnectionCategory	Category of the connection
createdByWorkspaceArmId	string (arm-id)
credentials	WorkspaceConnectionSharedAccessSignature
expiryTime	string (date-time)
group	ConnectionGroup	Group based on connection category
isSharedToAll	boolean
metadata	object	Store user metadata for this connection
sharedUserList	string[]
target	string
value	string	Value details of the workspace connection.
valueFormat	ValueFormat	format for the workspace connection value

ServicePrincipalAuthTypeWorkspaceConnectionProperties

Object

Name	Type	Description
authType	string: ServicePrincipal	Authentication type of the connection target
category	ConnectionCategory	Category of the connection
createdByWorkspaceArmId	string (arm-id)
credentials	WorkspaceConnectionServicePrincipal
expiryTime	string (date-time)
group	ConnectionGroup	Group based on connection category
isSharedToAll	boolean
metadata	object	Store user metadata for this connection
sharedUserList	string[]
target	string
value	string	Value details of the workspace connection.
valueFormat	ValueFormat	format for the workspace connection value

systemData

Object

Metadata pertaining to creation and last modification of the resource.

Name	Type	Description
createdAt	string (date-time)	The timestamp of resource creation (UTC).
createdBy	string	The identity that created the resource.
createdByType	createdByType	The type of identity that created the resource.
lastModifiedAt	string (date-time)	The timestamp of resource last modification (UTC)
lastModifiedBy	string	The identity that last modified the resource.
lastModifiedByType	createdByType	The type of identity that last modified the resource.

UsernamePasswordAuthTypeWorkspaceConnectionProperties

Object

Name	Type	Description
authType	string: UsernamePassword	Authentication type of the connection target
category	ConnectionCategory	Category of the connection
createdByWorkspaceArmId	string (arm-id)
credentials	WorkspaceConnectionUsernamePassword
expiryTime	string (date-time)
group	ConnectionGroup	Group based on connection category
isSharedToAll	boolean
metadata	object	Store user metadata for this connection
sharedUserList	string[]
target	string
value	string	Value details of the workspace connection.
valueFormat	ValueFormat	format for the workspace connection value

ValueFormat

Enumeration

format for the workspace connection value

Value	Description
JSON

WorkspaceConnectionAccessKey

Object

Name	Type	Description
accessKeyId	string
secretAccessKey	string

WorkspaceConnectionAccountKey

Object

Name	Type	Description
key	string

WorkspaceConnectionApiKey

Object

Api key object for workspace connection credential.

Name	Type	Description
key	string

WorkspaceConnectionManagedIdentity

Object

Name	Type	Description
clientId	string
resourceId	string

WorkspaceConnectionOAuth2

Object

ClientId and ClientSecret are required. Other properties are optional depending on each OAuth2 provider's implementation.

Name	Type	Description
authUrl	string (url)	Required by Concur connection category
clientId	string (uuid)	Client id in the format of UUID
clientSecret	string
developerToken	string	Required by GoogleAdWords connection category
password	string
refreshToken	string	Required by GoogleBigQuery, GoogleAdWords, Hubspot, QuickBooks, Square, Xero, Zoho where user needs to get RefreshToken offline
tenantId	string	Required by QuickBooks and Xero connection categories
username	string	Concur, ServiceNow auth server AccessToken grant type is 'Password' which requires UsernamePassword

WorkspaceConnectionPersonalAccessToken

Object

Name	Type	Description
pat	string

WorkspaceConnectionPropertiesV2BasicResource

Object

Name	Type	Description
id	string	Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}
name	string	The name of the resource
properties	WorkspaceConnectionPropertiesV2: AADAuthTypeWorkspaceConnectionProperties AccessKeyAuthTypeWorkspaceConnectionProperties AccountKeyAuthTypeWorkspaceConnectionProperties ApiKeyAuthWorkspaceConnectionProperties CustomKeysWorkspaceConnectionProperties ManagedIdentityAuthTypeWorkspaceConnectionProperties NoneAuthTypeWorkspaceConnectionProperties OAuth2AuthTypeWorkspaceConnectionProperties PATAuthTypeWorkspaceConnectionProperties SASAuthTypeWorkspaceConnectionProperties ServicePrincipalAuthTypeWorkspaceConnectionProperties UsernamePasswordAuthTypeWorkspaceConnectionProperties
systemData	systemData	Azure Resource Manager metadata containing createdBy and modifiedBy information.
type	string	The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"

WorkspaceConnectionServicePrincipal

Object

Name	Type	Description
clientId	string
clientSecret	string
tenantId	string

WorkspaceConnectionSharedAccessSignature

Object

Name	Type	Description
sas	string

WorkspaceConnectionUsernamePassword

Object

Name	Type	Description
password	string
securityToken	string	Optional, required by connections like SalesForce for extra security in addition to UsernamePassword
username	string

Share via

Workspace Connections - List Secrets

URI Parameters

Responses

Security

azure_auth

Scopes

Examples

GetWorkspaceConnection

Sample request

Sample response

Definitions

AADAuthTypeWorkspaceConnectionProperties

AccessKeyAuthTypeWorkspaceConnectionProperties

AccountKeyAuthTypeWorkspaceConnectionProperties

ApiKeyAuthWorkspaceConnectionProperties

ConnectionAuthType

ConnectionCategory

ConnectionGroup

createdByType

CustomKeys

CustomKeysWorkspaceConnectionProperties

ErrorAdditionalInfo

ErrorDetail

ErrorResponse

ManagedIdentityAuthTypeWorkspaceConnectionProperties

NoneAuthTypeWorkspaceConnectionProperties

OAuth2AuthTypeWorkspaceConnectionProperties

PATAuthTypeWorkspaceConnectionProperties

SASAuthTypeWorkspaceConnectionProperties

ServicePrincipalAuthTypeWorkspaceConnectionProperties

systemData

UsernamePasswordAuthTypeWorkspaceConnectionProperties

ValueFormat

WorkspaceConnectionAccessKey

WorkspaceConnectionAccountKey

WorkspaceConnectionApiKey

WorkspaceConnectionManagedIdentity

WorkspaceConnectionOAuth2

WorkspaceConnectionPersonalAccessToken

WorkspaceConnectionPropertiesV2BasicResource

WorkspaceConnectionServicePrincipal

WorkspaceConnectionSharedAccessSignature

WorkspaceConnectionUsernamePassword