diff --git a/specification/machinelearningservices/resource-manager/Microsoft.MachineLearningServices/preview/2020-09-01-preview/examples/createWorkspace.json b/specification/machinelearningservices/resource-manager/Microsoft.MachineLearningServices/preview/2020-09-01-preview/examples/createWorkspace.json
index 1edd946727e7..d6bb0ca3edbc 100644
--- a/specification/machinelearningservices/resource-manager/Microsoft.MachineLearningServices/preview/2020-09-01-preview/examples/createWorkspace.json
+++ b/specification/machinelearningservices/resource-manager/Microsoft.MachineLearningServices/preview/2020-09-01-preview/examples/createWorkspace.json
@@ -11,7 +11,7 @@
         "tier": "Basic"
       },
       "identity": {
-        "type": "SystemAssigned"
+        "type": "SystemAssigned, UserAssigned"
       },
       "properties": {
         "friendlyName": "HelloName",
@@ -22,6 +22,9 @@
         "storageAccount": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/accountcrud-1234/providers/Microsoft.Storage/storageAccounts/testStorageAccount",
         "encryption": {
           "status": "Enabled",
+          "identity": {
+            "userAssignedIdentity": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/workspace-1234/providers/Microsoft.ManagedIdentity/userAssignedIdentities/testuai"
+          },
           "keyVaultProperties": {
             "keyVaultArmId": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/workspace-1234/providers/Microsoft.KeyVault/vaults/testkv",
             "keyIdentifier": "https://testkv.vault.azure.net/keys/testkey/aabbccddee112233445566778899aabb",
@@ -53,7 +56,7 @@
         "identity": {
           "principalId": "00000000-1111-2222-3333-444444444444",
           "tenantId": "00000000-1111-2222-3333-444444444444",
-          "type": "SystemAssigned"
+          "type": "SystemAssigned, UserAssigned"
         },
         "sku": {
           "name": "Basic",
@@ -70,6 +73,9 @@
           "description": "test description",
           "encryption": {
             "status": "Enabled",
+            "identity": {
+              "userAssignedIdentity": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/workspace-1234/providers/Microsoft.ManagedIdentity/userAssignedIdentities/testuai"
+            },
             "keyVaultProperties": {
               "keyVaultArmId": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/workspace-1234/providers/Microsoft.KeyVault/vaults/testkv",
               "keyIdentifier": "https://testkv.vault.azure.net/keys/testkey/aabbccddee112233445566778899aabb",
@@ -113,6 +119,9 @@
           "description": "test description",
           "encryption": {
             "status": "Enabled",
+            "identity": {
+              "userAssignedIdentity": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/workspace-1234/providers/Microsoft.ManagedIdentity/userAssignedIdentities/testuai"
+            },
             "keyVaultProperties": {
               "keyVaultArmId": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/workspace-1234/providers/Microsoft.KeyVault/vaults/testkv",
               "keyIdentifier": "https://testkv.vault.azure.net/keys/testkey/aabbccddee112233445566778899aabb",
diff --git a/specification/machinelearningservices/resource-manager/Microsoft.MachineLearningServices/preview/2020-09-01-preview/examples/getWorkspace.json b/specification/machinelearningservices/resource-manager/Microsoft.MachineLearningServices/preview/2020-09-01-preview/examples/getWorkspace.json
index 6e7461be23ca..aaab01f00d1a 100644
--- a/specification/machinelearningservices/resource-manager/Microsoft.MachineLearningServices/preview/2020-09-01-preview/examples/getWorkspace.json
+++ b/specification/machinelearningservices/resource-manager/Microsoft.MachineLearningServices/preview/2020-09-01-preview/examples/getWorkspace.json
@@ -27,6 +27,9 @@
           "description": "test description",
           "encryption": {
             "status": "Enabled",
+            "identity": {
+              "userAssignedIdentity": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/workspace-1234/providers/Microsoft.ManagedIdentity/userAssignedIdentities/testuai"
+            },
             "keyVaultProperties": {
               "keyVaultArmId": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/workspace-1234/providers/Microsoft.KeyVault/vaults/testkv",
               "keyIdentifier": "https://testkv.vault.azure.net/keys/testkey/aabbccddee112233445566778899aabb",
diff --git a/specification/machinelearningservices/resource-manager/Microsoft.MachineLearningServices/preview/2020-09-01-preview/machineLearningServices.json b/specification/machinelearningservices/resource-manager/Microsoft.MachineLearningServices/preview/2020-09-01-preview/machineLearningServices.json
index 3c283424747c..1ad15b36f2f9 100644
--- a/specification/machinelearningservices/resource-manager/Microsoft.MachineLearningServices/preview/2020-09-01-preview/machineLearningServices.json
+++ b/specification/machinelearningservices/resource-manager/Microsoft.MachineLearningServices/preview/2020-09-01-preview/machineLearningServices.json
@@ -4218,6 +4218,10 @@
             "modelAsString": true
           }
         },
+        "identity": {
+          "$ref": "#/definitions/IdentityForCmk",
+          "description": "The identity that will be used to access the key vault for encryption at rest."
+        },
         "keyVaultProperties": {
           "$ref": "#/definitions/KeyVaultProperties",
           "description": "Customer Key vault properties."
@@ -4225,6 +4229,7 @@
       },
       "required": [
         "status",
+        "identity",
         "keyVaultProperties"
       ],
       "type": "object"
@@ -4250,6 +4255,19 @@
       ],
       "type": "object"
     },
+    "IdentityForCmk": {
+      "description": "Identity that will be used to access key vault for encryption at rest",
+      "type": "object",
+      "properties": {
+        "userAssignedIdentity": {
+          "description": "The ArmId of the user assigned identity that will be used to access the customer managed key vault",
+          "type": "string"
+        }
+      },
+      "required": [
+        "userAssignedIdentity"
+      ]
+    },
     "LinkedServiceResponse": {
       "description": "Linked service.",
       "type": "object",