Hello @Dario Chemello !
Thank you for your message
Something happened to my answer , can you kindly Re Accept it ? ( Only if you already Accepted It otherwise lets move on, just if you think any answer helped kindly Accept It and Upvote !)
I can see what you are looking for. There is no direct way to do that in Org Level , like a config or a Check Box
BUT , i can provide all the details that will make this Project work like an Organization and frankly this is a Best Practice if you are working as a Team , so lets go !
Centralized Resource Group:
Create a resource group within Azure that's dedicated to your team or company. This resource group would be the central place where all related Azure resources reside, including your Document Intelligence Studio resources and models.
By having a centralized resource group, any models trained within this group would be accessible to anyone with the necessary permissions.
Service Principal for Automation (or Managed Identity):
Create a service principal in Azure Active Directory. This service principal can authenticate to Azure services and can be granted permissions just like a user account.
Grant this service principal the necessary roles and permissions to the resource group and associated services.
Use this service principal for API calls, which ensures that the keys are not tied to an individual user but rather to the service principal, which represents the company or team within Azure. You can do this also with a "company" user account , but not recommended.
Shared Access:
Within the Azure portal, grant access to the relevant Azure resources to your team members. This can be done by adding them to the Azure role assignments for the specific resources with roles like "Contributor" or "Reader" based on what level of access they need.
Retraining and Model Updates:
When a model is retrained, you can update the endpoint to point to the new model version, ensuring that API calls use the latest model.
The API keys you use to access the models via the API can remain the same if the resources like the Azure Cognitive Services account are part of the centralized resource group and your API keys are tied to that.
Continuous Integration/Continuous Deployment (CI/CD):
Implement CI/CD pipelines for your machine learning models using Azure DevOps or GitHub Actions. This can automate the process of retraining and deployment, keeping everything within the company's control and avoiding manual interventions.
Through CI/CD, once a model is retrained and validated, it can be automatically deployed and made available through the existing API endpoints.
this is a High Level of my perception and it is based on Best Practices regarding Identities and Service to Service integration. It is needed to break down all tasks and study the Engineering of the implementation.
It also needs a good understanding of Azure Integration , Identity Clients & SDKs
It is a strategy for a Team to Collaborate and work on a Solution , without bounding specific aspects to a user , rather to a Service Principal or a Managed Identity, which in turn can grant access and be used by team members
This method needs careful planning and Testing , and a good understanding of the concepts of Managed Identities and Service Principals
have a look
https://learn.microsoft.com/en-us/azure/ai-services/document-intelligence/managed-identities?view=doc-intel-4.0.0
https://learn.microsoft.com/en-us/azure/ai-services/document-intelligence/managed-identities-secured-access?view=doc-intel-4.0.0
https://learn.microsoft.com/en-us/azure/ai-services/authentication?context=%2Fazure%2Fai-services%2Fdocument-intelligence%2Fcontext%2Fcontext&view=doc-intel-4.0.0&tabs=powershell
At the end of the day your approach would be a Principal - Managed Identity client where access is granted to it and then you can abandon the sharing options as we discussed earlier
I hope this helps!
Kindly mark the answer as Accepted and Upvote in case it helped!
Regards