Restrict Azure AI Services Subservices

Question

Hi, I'm wondering if there is a possibility to allow only a certain subset of AI services for usage. As far as my understanding goes, the AI services and their API endpoints of e.g. multi-service account allows you to use multiple functionalities such as AI vision/ computer vision, face api, formrecognizer etc. through a single key and endpoint. What if I only want to enable e.g. Computer Vision with the OCR capabilities but not the face functionalities on the platform because of company regulations on dataprotection? Since they are sharing the same service provider, it seems very difficult to me even with RBAC or policies which are governing resources based on provider names and actions. Someone ideas?

Answer 1

@Quân Thanks for reaching out to us again, one way we can think about is not using all in one resource but using separate resources for different group. Though all in one resource is recommended now, resource for single product is still available -

Does this make sense? At the meantime, you can leverage the roles to do it, there are a lot of build in roles for Azure AI Services resource for only one product read/write as below, as you mentioned, it not worked for you, what is the problem?

Please let me know how it works for you, thanks a lot. Regards, Yutong