Document Intelligence Studio Label Data Key based authentication error

Question

Hi,

i have set up a storage account with a container. i have disabled key access and added my Entra id to the roles with storage data contributor and added the system assigned identity of document intelligence identity with storage reader role to storage account.

I can set up a new project in document intelligence studio, and upload a pdf through the portal of document intelligence studio. I even see this file appear in the storage account, so i assume this part is actually working

However when I go to label data and click Run Layout on my pdf I receive this issue:

AuthenticationTypeDisabled

Key based authentication is disabled for this resource. apim-request-id: e766eeb2-1793-46b0-9cb4-e9630afe977d

Close

I have set disableLocalAuth to true for my document intelligence instance in azure as well.

What am i missing here?

Answer 1

Hi @Menno Laan,

Thank you for reaching out to Microsoft Q&A forum!

This error message indicates that you have correctly set up the necessary permissions for your Document Intelligence Studio instance to access your storage account. However, the error message you received indicates that key-based authentication is disabled for the resource.
Ensure that the Azure blob storage account in the same region as your Document Intelligence resource. You also need to create containers to store and organize your blob data within your storage account.

• If your storage account is behind a firewall, you must enable the following configuration:

On your storage account page, select Security + networking → Networking from the left menu.

In the main window, select Allow access from selected networks.

On the selected networks page, navigate to the Exceptions category and make certain that the Allow Azure services on the trusted services list to access this storage account checkbox is enabled.

• A brief understanding of Azure role-based access control (Azure RBAC) using the Azure portal.

Please refer to this documentation: Managed identities for Document Intelligence.

I hope this helps. Thank you.