Error when calling Azure Search client for creation or searching tasks

Das Gupta, Abhijeet 100

I'm seeing the following error when trying to call the search clients i.e. SearchClient and SearchIndexClient.

For more context, I'm using my compute instance for Azure AI Studio resource's project space for calling the clients using Azure Search sdk

Can anyone please guide on what permissions I might be missing if that is the reason for seeing this error?

HttpResponseError: Operation returned an invalid status 'Forbidden'

Grmacjon-MSFT 17,456 Reputation points

2024-06-04T14:52:18.4533333+00:00
Hi @Das Gupta, Abhijeet you probably need the"Search contributor" or "Search owner" role.

Your compute instance needs access to the specific Azure Search service you're trying to interact with. This access is controlled by Azure Active Directory (AAD) roles. While your compute instance might be within the project space of Azure AI Studio, it doesn't automatically inherit permissions for all resources within that project space.

To fix this you can Verify AAD Role Assignment:

Access the Azure portal and navigate to your Azure Search service.

Go to the "Access control (IAM)" section of your Azure Search service.

Ensure your compute instance (or the AAD identity used by your compute instance) has been assigned an appropriate role. Roles like "Search contributor" or "Search owner" would grant the necessary permissions for using SearchClient and SearchIndexClient.

Also, If you're using a managed identity for your compute instance within Azure, make sure it's assigned the required AAD role on the Azure Search service. You can configure managed identity access control in the Azure portal.

Hope that helps.

-Grace
Das Gupta, Abhijeet 100 Reputation points

2024-06-05T07:40:34.7+00:00

Hi , I do not see any "Search Index Data Contributor" role that can be assigned to my project space, do you think this role is to assigned to my Azure AI Studio Hub as my project space comes under this hub? Thank you