In Azure DevOps, I cannot create a service connection using the scope level of 'AzureMLWorkspace'. The error generated suggests i don't have permission to add a role. As a workaround, i manually created an SP and had my subscription admin provide it 'contributor' role access. This approach also fails from the ADO side likely because the SP is not added as a user to the AML Workspace - and i don't have sufficient permissions as a 'contributor' to do so. This is a blocker for using Azure Model registration as an artifact for Azure DevOps and I have documented it on the ML Platform/AzureMLPython SDK teams channel.