Azure OpenAI Studio

Bus It 10

I have this issue while adding data to Azure OpenAI studio, how I can solve this problem, I am using a private VNET, the error is: We couldn't connect your data
Principal does not have access to API/Operation. How I can solve the problem? Thanks. Error

navba-MSFT 24,910 Reputation points Microsoft Employee

2024-02-08T06:31:24.7866667+00:00

@Bus It Welcome to Microsoft Q&A Forum, Thank you for posting your query here!

Please find below some of the action plans which you can try.

Plan 1:

To allow access to your Azure AI Search resource from your client machines, like using Azure OpenAI Studio, you need to create private endpoint connections that connect to your Azure AI Search resource. Please confirm if this is done.

Plan 2:

To allow access to your Azure AI Search resource from Azure OpenAI resource, you need to submit an application form. The application will be reviewed in 10 business days and you will be contacted via email about the results. If you are eligible, we will provision the private endpoint in Microsoft managed virtual network, and send a private endpoint connection request to your search service, and you will need to approve the request. Please confirm if this is done. See below screenshot:

Plan 3:

To use the playground you can assign the role Cognitive Services Contributor to the user from Azure portal and logout from the studio and then login to check if the playground works as expected.

Plan 4:

Please follow the steps mentioned in this article.

Plan 5:

Here is a similar issue try to check if this helps. https://github.com/Azure-Samples/azure-search-openai-demo/issues/87

Please check the necessary permissions to access the API/Operation. You can also check the access policies for your Azure OpenAI resource and ensure that the principal has the necessary permissions. Refer to this https://github.com/Azure-Samples/azure-search-openai-demo#sharing-environments

Your Azure Account must have Microsoft.Authorization/roleAssignments/write permissions, such as User Access Administrator or Owner.

Hope this helps.
Bus It 10 Reputation points

2024-02-08T08:38:02.03+00:00

Hi Navba,

I have make some troubleshotting via broswer and find that the error was caused by the Ingestion Jobs - Create API (https://learn.microsoft.com/en-us/rest/api/azureopenai/ingestion-jobs/create?view=rest-azureopenai-2023-10-01-preview#code-try-0) making the PUT gets an 401 ERROR. I notice also that in the Remote Host parameter is set the public address of OpenAi is correct (because is in a private NET....) ? If you need more info. Tell me. Regards.
navba-MSFT 24,910 Reputation points Microsoft Employee

2024-02-08T08:48:32.1233333+00:00

@Bus It Thanks for getting back and sharing the update. Please ensure that above plan 1, 2 and 4 are followed. Also share the detailed error message while you got the 401 error while invoking the ingestion job API.
Bus It 10 Reputation points

2024-02-09T15:28:10.2133333+00:00

Hi Navba, plan 1 is ok, plan 2 is ok, plan 4 is ok. What detail you need about the API of the ingestion job API ?
navba-MSFT 24,910 Reputation points Microsoft Employee

2024-02-12T04:52:45.6766667+00:00

@Bus It Thanks for getting back. You had mentioned about getting 401 error while doing a PUT API call to perform ingestion operation. Could you please share the error details of 401. Also share the complete response body while you received the 401 error.

2 answers

jkmz 10 Reputation points

2024-06-28T09:19:14.8933333+00:00
Hey. I had the exact same issue. All roles assigned, using System Assigned Identity, vnet and private endpoints setup correctly. Bunch of 401 errors when OpenAI studio is trying to do PUT:

PUT <resource_name>.openai.azure.com/openai/ingestion/jobs/<index_name>?api-version=2024-05-01-preview

Decoding the token used by the operation it looks like it is using your (users) identity. The error message is confusing stating that the "Principal has no access to API/Operation" when in fact that is the user using OpenAi studio that needs the permission.

Fix: Grant "Cognitive Services OpenAI Contributor" on your OpenAI resource to the user account that is using the OpenAi / Azure AI Studio"
Please sign in to rate this answer.

2 people found this answer helpful.
Paul Hernandez 676 Reputation points Microsoft Employee

2024-07-09T15:43:11.9666667+00:00

Hi @jkmz , believe it or not, this solved the issue for me too. There is even a process that validates settings in the wizard, and it suceeded, then it chrashed when the process ran. I'm even the owner of the subscription and need to add myself to the role you mentioned. Thank!
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Q&A Assist

2024-02-07T13:37:50.67+00:00

AI generated content. This question contains an answer created with AI from Q&A Assist. Learn more
Based on the provided context, the error message "Principal does not have access to API/Operation" occurs when the principal (user or service principal) does not have the necessary permissions to access the API or operation. Since you are using a private VNet, it is possible that the necessary permissions are not set up correctly. You can try the following steps to resolve the issue:

Ensure that your private VNet is correctly configured to allow traffic to and from the Azure OpenAI resource.

Ensure that the principal (user or service principal) has the necessary permissions to access the API or operation. You can check the permissions by going to the Azure portal and navigating to the Azure OpenAI resource, then selecting "Access control (IAM)" and checking the role assignments for the principal.

If the necessary permissions are not set up correctly, you can add the necessary role assignments to the principal to allow access to the API or operation.

References:

Quickstart: Chat with Azure OpenAI models using your own data (programming-language-studio)
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Azure OpenAI Studio

2 answers

Your answer