How to resolve this error: Managed Identity (MI) is not set for this account while the encryption key source is \'Microsoft.KeyVault\

Question

Currently I want to create a chat with Azure Open AI models using your own data. But, I am getting the error: Managed Identity (MI) is not set for this account while the encryption key source is 'Microsoft.KeyVault\ when I tried to call my api. I already enabled the system-assigned account under AI search and assigned the Blob Data Reader role to the system-assigned account. Please refer to my code below.

    messages = [{"role": "system", "content": "You are a helpful assistant."}] + conversation.messages

    response = client.chat.completions.create(
        model=deployment,
        messages=messages,
        extra_body={
            "dataSources": [
                {
                    "type": "AzureCognitiveSearch",
                    "parameters": {
                        "endpoint": search_endpoint,
                        "key": search_key,
                        "indexName": search_index_name,
                    }
                }
            ]
        }
    )

Answer 1

Hi ,

Thanks for reaching out to Microsoft Q&A.

The error message indicates that a Managed Identity (MI) is required for your account when trying to access encryption keys from Microsoft Key Vault. Do you see any specific errors in your key vault logs? if not try the following steps(if not yet) and let me know.

• Assign MI to your application and then make sure that it has been granted the necessary permissions to access the keys stored in key vault.
• Update the code or configuration settings in your application to utilize the Managed Identity endpoint for authentication when retrieving encryption keys
• Verify that the URI in your application's configuration for the key vault URI

Please 'Upvote'(Thumbs-up) and 'Accept' as an answer if the reply was helpful. This will benefit other community members who face the same issue.