Hello everyone, I was looking into this for a few hours, and checking out the 502 error, I realized that is trying to get information from the parent subscription. We know that giving just access need it at RG level works nice, but looks that this information comes from the subscription and needs an access from there.
Just create a CustomRole with this permission:
Microsoft.CognitiveServices
- Read all usages data
Assign it at subscription level to the user
Also be sure to assign any of the needed contributor roles at RG level, for example:
- Cognitive Services Contributor
- Cognitive Services OpenAI Contributor
Only with these permissions should work, and lets the No Owner User create a new deployment, this works fine for me.
Regards.