What permissions are needed to utilize auto label in the AI Document Intelligence Studio?

Matthew Burden 30 Reputation points

I currently have a AI Document Intelligence created and working. I am trying to figure out why I am unable to utilize the auto labeling feature and have had no luck finding info in the documentation. I am the owner of the resource group and have inherited roles (such as reader, contributor, etc). I thought giving the ADI a Blob Data Contributor role might help, but this did not work. Does anyone know what permissions are required for this feature?
User's image

Azure AI Document Intelligence
Azure AI Document Intelligence
An Azure service that turns documents into usable data. Previously known as Azure Form Recognizer.
1,430 questions
0 comments No comments
{count} votes

Accepted answer
  1. VasaviLankipalle-MSFT 14,831 Reputation points

    Hello @Matthew Burden , I'm glad that you were able to resolve your issue and thank you for posting your solution so that others experiencing the same thing can easily reference this! Since the Microsoft Q&A community has a policy that "The question author cannot accept their own answer. They can only accept answers by others ", I'll repost your solution in case you'd like to accept the answer .

    Issue: Unable to utilize the auto labeling feature with AuthorizationFailure error when Document Intelligence or Storage Account resource is configured with a firewall?

    Solution: Add website IP address,, to the firewall allowlist for both Document Intelligence and Storage Account resources. This is Document Intelligence Studio's dedicated IP address and can be safely allowed. Please follow the documentation here for more information: https://learn.microsoft.com/en-us/azure/ai-services/document-intelligence/faq?view=doc-intel-3.1.0#why-am-i-receiving-an-authorizationfailure-error-on-project-sharing--auto-label--or-ocr-upgrade-when-my-document-intelligence-or-storage-account-resource-is-configured-with-a-firewall-


    Thank you again for your time and patience throughout this issue.

    Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

    0 comments No comments

1 additional answer

Sort by: Most helpful
  1. Matthew Burden 30 Reputation points

    I ended up figuring out the solution. It turns out that, at least for me, all that needed to be done was to allow the Form Recognizer Studio IP through the firewall of the AI Document Intelligence and associated storage account.

    Here is the IP:

    Here is a link to where I found the answer: https://learn.microsoft.com/en-us/azure/ai-services/document-intelligence/faq?view=doc-intel-3.1.0#why-am-i-receiving-an-authorizationfailure-error-on-project-sharing--auto-label--or-ocr-upgrade-when-my-document-intelligence-or-storage-account-resource-is-configured-with-a-firewall-

    1 person found this answer helpful.
    0 comments No comments