What permissions are needed to utilize auto label in the AI Document Intelligence Studio?

Question

I currently have a AI Document Intelligence created and working. I am trying to figure out why I am unable to utilize the auto labeling feature and have had no luck finding info in the documentation. I am the owner of the resource group and have inherited roles (such as reader, contributor, etc). I thought giving the ADI a Blob Data Contributor role might help, but this did not work. Does anyone know what permissions are required for this feature?

Answer 1

Hello @Matthew Burden , I'm glad that you were able to resolve your issue and thank you for posting your solution so that others experiencing the same thing can easily reference this! Since the Microsoft Q&A community has a policy that "The question author cannot accept their own answer. They can only accept answers by others ", I'll repost your solution in case you'd like to accept the answer .

Issue: Unable to utilize the auto labeling feature with AuthorizationFailure error when Document Intelligence or Storage Account resource is configured with a firewall?

Solution: Add website IP address, 20.3.165.95, to the firewall allowlist for both Document Intelligence and Storage Account resources. This is Document Intelligence Studio's dedicated IP address and can be safely allowed. Please follow the documentation here for more information: https://learn.microsoft.com/en-us/azure/ai-services/document-intelligence/faq?view=doc-intel-3.1.0#why-am-i-receiving-an-authorizationfailure-error-on-project-sharing--auto-label--or-ocr-upgrade-when-my-document-intelligence-or-storage-account-resource-is-configured-with-a-firewall-

Regards,
Vasavi

Thank you again for your time and patience throughout this issue.

Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

Answer 2

I ended up figuring out the solution. It turns out that, at least for me, all that needed to be done was to allow the Form Recognizer Studio IP through the firewall of the AI Document Intelligence and associated storage account.

Here is the IP: 20.3.165.95

Here is a link to where I found the answer: https://learn.microsoft.com/en-us/azure/ai-services/document-intelligence/faq?view=doc-intel-3.1.0#why-am-i-receiving-an-authorizationfailure-error-on-project-sharing--auto-label--or-ocr-upgrade-when-my-document-intelligence-or-storage-account-resource-is-configured-with-a-firewall-