Can not use Azure language studio with local auth disabled

Question

I want to use Conversational Language Understanding in my organization, but a policy exists that key-based authentication(local auth) is disabled. Now with this condition When I Tried to create a CLU project in a language studio I got the same error (403 forbidden key-based auth is disabled). So what are the options for using a graphical interface to create a language-understanding resource? I can use Role-based access which is allowed in the organization. So is there any possibility or I am trying to do something impossible in Azure

Answer 1

Hello Aman Sharma,

Welcome to the Microsoft Q&A and thank you for posting your questions here.

Problem

I understand that you would like to implement Conversational Language Understanding (CLU) in Azure, but their organization has a policy that prohibits key-based authentication. Specifically, you are asking whether it's possible to use role-based access control (RBAC) instead of key-based authentication to achieve this goal.

Solution

The problem of using Conversational Language Understanding (CLU) in Azure without key-based authentication could be solved by leveraging Azure's Role-Based Access Control (RBAC) and Azure Active Directory (AAD) authentication.

The below steps are critical to follow:

1. Ensure your user or AAD application has the necessary RBAC role.
2. Register an application in Azure AD and generate a client secret.
3. Use the service principal credentials to authenticate and create CLU resources.
4. Use the graphical interface in Language Studio with RBAC permissions

By following these steps, you can use Conversational Language Understanding (CLU) in Azure without relying on key-based authentication, this will actually adhere to your organization's security policies.

References

For more details about step-by-step, kindly use the resources below for more help:

Source: Azure RBAC documentation. Accessed, 5/31/2024.

Source: Azure built-in roles - Azure RBAC. Accessed, 5/31/2024.

Source: Register an app in the Microsoft identity platform 1. Accessed, 5/31/2024.

Source: Register an application with the Microsoft identity platform 2. Accessed, 5/31/2024.

Source: Get started with Language Studio - Azure AI services. Accessed, 5/31/2024.

Source: How to create projects in Conversational Language Understanding. Accessed, 5/31/2024.

Source: Conversational Language Understanding - Azure AI services. Accessed, 5/31/2024.

Accept Answer

I hope this is helpful! Do not hesitate to let me know if you have any other questions.

** Please don't forget to close up the thread here by upvoting and accept it as an answer if it is helpful ** so that others in the community facing similar issues can easily find the solution.

Best Regards,

Sina Salam