Getting error trying to set up ai chatbot

Question

Getting error trying to set up ai chatbot

Rae Becerra 0

A user is trying to create an AI chatbot and has a fair amount of roles assigned but keeps getting this error: failed to retrieve information about the selected search resource. Please try again later or choose a different resource.

We are trying to figure out the right permissions to make this possible as we cannot just give everyone global admin.

navba-MSFT 27,550 Reputation points Microsoft Employee Moderator

2024-03-07T03:24:58.2233333+00:00
@Rae Becerra Welcome to Microsoft Q&A Forum, Thank you for posting your query here!

Is the user trying to create Azure Bot Service ?

If yes, Creating a bot in the Azure portal requires Contributor access either in the subscription or in a specific resource group. A user with the Contributor role in a resource group can create a new bot in that specific resource group. A user in the Contributor role for a subscription can create a bot in a new or existing resource group.

Is the user trying to create an Azure Open AI service?

If yes, For your scenario, Cognitive Services Contributor would be suitable. Azure OpenAI Service supports Azure role-based access control (Azure RBAC), an authorization system for managing individual access to Azure resources. You assign different team members different levels of permissions based on their needs for a given project. Some of the roles include:

Cognitive Services OpenAI User

Cognitive Services OpenAI Contributor

Cognitive Services Contributor

Cognitive Services Usages Reader

More info here.

Hope this helps. If you have any follow-up questions, please let me know. I would be happy to help.

**

Please do not forget to "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.
navba-MSFT 27,550 Reputation points Microsoft Employee Moderator

2024-03-11T03:07:07.0166667+00:00

@Rae Becerra Just following up to check if the below answer helped. If that answers your query, do click "Accept the answer” for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let me know. I would be happy to help.
Rae Becerra 0 Reputation points

2024-03-11T13:41:50.77+00:00

Hello, I was out of the office at the end or the week, apologies... but the user does have those roles assigned.

The steps are going to open ai studio and selecting the appropriate resource --> Chat playground --> Setup --> Add your data -->Select Azure Blob storage resource (this works)

Select storage container (this is literally a container the user himself created in the storage blob), generally works

Select Azure AI Search resource: this is the part that fails and errors out continuously for the user.
navba-MSFT 27,550 Reputation points Microsoft Employee Moderator

2024-03-11T14:54:42.4633333+00:00

@Rae Becerra Thanks for getting back. Could you please ensure that the Storage account developerblob has the CORS permissions as shown below ?

Also ensure that under the Networking section, Enabled from all networks setting is selected:

For the Search resource ensure that the user has contributor permissions.

And ensure that the Search Service has the All networks setting enabled:

Awaiting your reply.
Rae Becerra 0 Reputation points

2024-03-11T17:10:44.1933333+00:00

I can double-check, we definitely use private endpoints for this but they are appropriately set up.

Let me re-verify the networking and get back to you.

Your answer

navba-MSFT 27,550 Reputation points Microsoft Employee Moderator

2024-03-07T03:24:58.2233333+00:00

@Rae Becerra Welcome to Microsoft Q&A Forum, Thank you for posting your query here!

Is the user trying to create Azure Bot Service ?

If yes, Creating a bot in the Azure portal requires Contributor access either in the subscription or in a specific resource group. A user with the Contributor role in a resource group can create a new bot in that specific resource group. A user in the Contributor role for a subscription can create a bot in a new or existing resource group.

Is the user trying to create an Azure Open AI service?

If yes, For your scenario, Cognitive Services Contributor would be suitable. Azure OpenAI Service supports Azure role-based access control (Azure RBAC), an authorization system for managing individual access to Azure resources. You assign different team members different levels of permissions based on their needs for a given project. Some of the roles include:

Cognitive Services OpenAI User

Cognitive Services OpenAI Contributor

Cognitive Services Contributor

Cognitive Services Usages Reader

More info here.

Hope this helps. If you have any follow-up questions, please let me know. I would be happy to help.

**

Please do not forget to "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.
navba-MSFT 27,550 Reputation points Microsoft Employee Moderator

2024-03-11T03:07:07.0166667+00:00

@Rae Becerra Just following up to check if the below answer helped. If that answers your query, do click "Accept the answer” for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let me know. I would be happy to help.
Rae Becerra 0 Reputation points

2024-03-11T13:41:50.77+00:00

Hello, I was out of the office at the end or the week, apologies... but the user does have those roles assigned.

The steps are going to open ai studio and selecting the appropriate resource --> Chat playground --> Setup --> Add your data -->Select Azure Blob storage resource (this works)

Select storage container (this is literally a container the user himself created in the storage blob), generally works

Select Azure AI Search resource: this is the part that fails and errors out continuously for the user.
navba-MSFT 27,550 Reputation points Microsoft Employee Moderator

2024-03-11T14:54:42.4633333+00:00

@Rae Becerra Thanks for getting back. Could you please ensure that the Storage account developerblob has the CORS permissions as shown below ?

Also ensure that under the Networking section, Enabled from all networks setting is selected:

For the Search resource ensure that the user has contributor permissions.

And ensure that the Search Service has the All networks setting enabled:

Awaiting your reply.
Rae Becerra 0 Reputation points

2024-03-11T17:10:44.1933333+00:00

I can double-check, we definitely use private endpoints for this but they are appropriately set up.

Let me re-verify the networking and get back to you.

Share via

Getting error trying to set up ai chatbot

Your answer