Feature differences between watsonx deployments
Feature differences between watsonx deployments IBM watsonx as a Service and watsonx on Cloud Pak for Data software have some differences in features and implementation. IBM watsonx as a Service is a set of IBM Cloud services. Watsonx services on Cloud Pak for Data 4.8 are offered as software that you must install and maintain. Services that are available on both deployments also have differences in features on IBM watsonx as a Service compared to watsonx software on Cloud Pak for Data 4.8. * [Platform differences](https://dataplatform.cloud.ibm.com/docs/content/wsj/getting-started/feature-matrix.html?context=cdpaas&locale=enplatform) * [Common features across services](https://dataplatform.cloud.ibm.com/docs/content/wsj/getting-started/feature-matrix.html?context=cdpaas&locale=encommon) * [Watson Studio](https://dataplatform.cloud.ibm.com/docs/content/wsj/getting-started/feature-matrix.html?context=cdpaas&locale=enws) * [Watson Machine Learning](https://dataplatform.cloud.ibm.com/docs/content/wsj/getting-started/feature-matrix.html?context=cdpaas&locale=enwml) * [Watson OpenScale](https://dataplatform.cloud.ibm.com/docs/content/wsj/getting-started/feature-matrix.html?context=cdpaas&locale=enwos) Platform differences IBM watsonx as a Service and watsonx software on Cloud Pak for Data share a common code base, however, they differ in the following key ways: Platform differences Features As a service Software Software, hardware, and installation IBM watsonx is fully managed by IBM on IBM Cloud. Software updates are automatic. Scaling of compute resources and storage is automatic. You sign up at [https://dataplatform.cloud.ibm.com](https://dataplatform.cloud.ibm.com). You provide and maintain hardware. You install, maintain, and upgrade the software. See [Software requirements](https://www.ibm.com/docs/SSQNUZ_4.8.x/sys-reqs/software-reqs.html). Storage You provision a IBM Cloud Object Storage service instance to provide storage. See [IBM Cloud Object Storage](https://dataplatform.cloud.ibm.com/docs/content/svc-welcome/cloud-object-storage.html). You provide persistent storage on a Red Hat OpenShift cluster. See [Storage requirements](https://www.ibm.com/docs/SSQNUZ_4.8.x/sys-reqs/storage-requirements.html). Compute resources for running workloads Users choose the appropriate runtime for their jobs. Compute usage is billed based on the rate for the runtime environment and the duration of the job. See [Monitor account resource usage](https://dataplatform.cloud.ibm.com/docs/content/wsj/admin/monitor-resources.html). You set up the number of Red Hat OpenShift nodes with the appropriate number of vCPUs. See [Hardware requirements](https://www.ibm.com/docs/SSQNUZ_4.8.x/sys-reqs/hardware-reqs.html) and [Monitoring the platform](https://www.ibm.com/docs/SSQNUZ_4.8.x/cpd/admin/platform-management.html). Cost You buy each service that you need at the appropriate plan level. Many services bill for compute and other resource consumption. See each service page in the [IBM Cloud catalog](https://cloud.ibm.com/catalog) or in the services catalog on IBM watsonx, by selecting Administration > Services > Services catalog from the navigation menu. You buy a software license based on the services that you need. See [Cloud Pak for Data](https://cloud.ibm.com/catalog/content/ibm-cp-datacore-6825cc5d-dbf8-4ba2-ad98-690e6f221701-global). Security, compliance, and isolation The data security, network security, security standards compliance, and isolation of IBM watsonx are managed by IBM Cloud. You can set up extra security and encryption options. See [Security of IBM watsonx](https://dataplatform.cloud.ibm.com/docs/content/wsj/getting-started/security-overview.html). Red Hat OpenShift Container Platform provides basic security features. Cloud Pak for Data is assessed for various Privacy and Compliance regulations and provides features that you can use in preparation for various privacy and compliance assessments. You are responsible for additional security features, encryption, and network isolation. See [Security considerations](https://www.ibm.com/docs/SSQNUZ_4.8.x/cpd/plan/security.html). Available services Most watsonx services are available in both deployment environments. <br>See [Services for IBM watsonx](https://dataplatform.cloud.ibm.com/docs/content/svc-welcome/cloud-services.html). Includes many other services for other components and solutions. See [Services for Cloud Pak for Data 4.8](https://www.ibm.com/docs/SSQNUZ_4.8.x/svc-nav/head/services.html). User management You add users and user groups and manage their account roles and permissions with IBM Cloud Identity and Access Management. See [Add users to the account](https://dataplatform.cloud.ibm.com/docs/content/wsj/getting-started/setup-addl-users.html). <br>You can also set up SAML federation on IBM Cloud. See [IBM Cloud docs: How IBM Cloud IAM works](https://cloud.ibm.com/docs/account?topic=account-iamoverview). You can add users and create user groups from the Administration menu. You can use the Identity and Access Management Service or use your existing SAML SSO or LDAP provider for identity and password management. You can create dynamic, attribute-based user groups. See [User management](https://www.ibm.com/docs/SSQNUZ_4.8.x/cpd/admin/users.html). Common features across services The following features that are provided with the platform are effectively the same for services on IBM watsonx as a Service and watsonx software on Cloud Pak for Data 4.8: * Global search for assets across the platform * The Platform assets catalog for sharing connections across the platform * Role-based user management within collaborative workspaces across the platform * Common infrastructure for assets and workspaces * A services catalog for adding services * View compute usage from the Administration menu The following table describes differences in features across services between IBM watsonx as a Service and watsonx software on Cloud Pak for Data 4.8: Differences in common features across services Feature As a service Software Manage all projects Users with the Manage projects permission from the IAM service access Manager role for the IBM Cloud Pak for Data service can join any project with the Admin role and then manage or delete the project. Users with the Manage projects permission can join any project with the Admin role and then manage or delete the project. Connections to remote data sources Most supported data sources are common to both deployment environments. <br>See [Supported connections](https://dataplatform.cloud.ibm.com/docs/content/wsj/manage-data/conn_types.html). See [Supported data sources](https://www.ibm.com/docs/SSQNUZ_4.8.x/cpd/access/data-sources.html). Connection credentials that are personal or shared Connections in projects and catalogs can require personal credentials or allow shared credentials. Shared credentials can be disabled at the account level. Platform connections can require personal credentials or allow shared credentials. Shared credentials can be disabled at the platform