This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(278.4, 68%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESG%3C/text%3E%3C/svg%3E)
I have disabled public network access for Azure OpenAI, Azure AI Search, and the Storage Account. I created a virtual network with two subnets: one subnet is used for private endpoints for OpenAI, AI Search, and the Storage Account, and the other is for VNet integration with my web app.
All services are connected via private endpoints. When I test the setup in Azure OpenAI Studio by navigating to Chat → Add your data → Add a data source, I select my Storage Account, choose the container, then select the AI Search service, provide an index name, and choose the Azure OpenAI embedding model with API-Key authentication. However, when I click Next, I receive the following errors:
Failed to validate the selected authentication type. Please resolve the following errors and click next.
I have followed the steps in the official Microsoft documentation here, but the issue persists.
@Sourav Gupta I think you need to enable MI access first for your OpenAI resource instead of API key authentication, since the error indicates that this authentication type is not valid.
To allow your Azure AI Search and Storage Account to recognize your Azure OpenAI Service via Microsoft Entra ID authentication, you need to assign a managed identity for your Azure OpenAI Service.
With respect to the errors, since you are using the studio, try enabling developer mode on your browser and collect the HAR trace logs to check which step or API call is causing these errors and you can then try to verify the steps mentioned in the document and retry the scenario.
@romungi-MSFT I enabled Managed Identity (MI) access for all services, and there were no errors during setup. After successfully verifying the system-assigned managed identity, I clicked "Save and Close," but received an error message saying, "We couldn't connect your data." I've also enabled CORS on the storage account. I'll attach screenshots for reference.
@Sourav Gupta I think i have seen that enabling CORS from this screen shows as a success but it is actually not adding an entry on the storage account settings, I have seen this issue in a previous incident. Could you please check if it added an entry on your storage account for all types:
Also, if you are using newer OpenAI studio, try using the older version by switching after checking your CORS settings.
@romungi-MSFT I tried using the older version of OpenAI Studio, but this time I received the following error: "We couldn't connect your data. Principal does not have access to API/Operation."
I assigned the Owner role to both Azure OpenAI and AI Search from the storage account, but I'm still encountering the same error.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(89.60000000000001, 5%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKT%3C/text%3E%3C/svg%3E)
Hi Sourav Gupta!
Did you get a way to solve the "We couldn't connect your data. Principal does not have access to API/Operation." issue?
I'm experiencing the same thing.
Hi @Kendall Tencio Esquivel Not yet, but once I find a solution, I’ll be sure to share it here. If you come across any solution, please share it with us as well.
I found this: https://azure.github.io/jpazpaas/2024/01/25/search-private-access-to-openai.html
But the cons mentioned for both the private link and managed identities are blockers to me.