Is it possible to create a custom role from "Cognitive Services OpenAI User" to apply for a specific model

Question

Hi

There is a limit of 30 azure openai resources per Azure subscription so we are creating numberous deployments in the same resource. Each deployment model is dedicated for a specific customer and we want each customer to access only to its model.

I have seen that the built-in role "Cognitive Services OpenAI User" gives access at the Azure openAi resource scope so to all models in the resource.

Is there a way to customize the role so it can give access only to a specific deployment name ?

Answer 1

Hi louey Bnecheikh lehocine

Currently, Azure OpenAI Service doesn’t support you create custom roles that limit access to specific model deployments within a resource. Instead, it has a built-in role called "Cognitive Services OpenAI User", which gives users access to all models inside that resource.

If you want to control access so that each customer can only use their own model deployment, the best way is to create a separate Azure OpenAI resource for each customer. Then, you can assign them the "Cognitive Services OpenAI User" role at the resource level, making sure they only access their specific model.

Kindly refer below link: azure-openai-roles

Hope this helps. Do let us know if you any further queries.

 

---

If this answers your query, do click Accept Answer and Yes for was this answer helpful.

Thank You.