How do I fix a 403 "This request is not authorized to perform this operation using this permission." error when accessing a newly created Language Studio project?

Pavel Gutin 80

I am trying to work my way through the Extract Custom Entities exercise. I am running into an issue when trying to access a newly created project. I can get though the creation steps, but when I click on the project, I get a 403 error that states "This request is not authorized to perform this operation using this permission."

Here are the things that I already tried after some troubleshooting:

I made sure that I am creating the project with the same storage account. (I only have a single one)
I checked to make sure that my storage account has "Blob anonymous access" Enabled
I checked that CORS is properly set
I checked that container has the right access level
I am out of ideas of what to try next.

Alejandro Parra 0 Reputation points

2024-08-18T22:13:46.4533333+00:00

Hi, I'm getting the same error and I've checked what you mentioned and everything looks the same
Abraham Guzman 0 Reputation points

2024-08-18T23:42:59.3466667+00:00

I have the same problem
DG 0 Reputation points

2024-08-19T07:51:49.4333333+00:00

Same problem here
Thanner, Andreas 0 Reputation points

2024-08-19T13:34:51.9466667+00:00

same issue here on my side
Henry Dogger 0 Reputation points

2024-08-19T14:27:55.07+00:00

Same problem here, any solutions?
David Jones 30 Reputation points

2024-08-19T19:43:48.68+00:00

I am seeing this as well. Trying this from Azure AI-102 self-study learn module instructions custom named entity recognition create new project. It worked on Saturday 8/17 for a different project I created in Language Studio and connected to the Azure AI Language service resource with storage account. I'm on standard tier and something else I googled implied 403 was a service quota or limit issues. I have submitted a support request issue.
Kolluru, Ramesh 0 Reputation points

2024-09-01T10:15:19.6966667+00:00

The issue has been resolved after following the above steps.

Thanks,

Ramesh. K
Doan Bui 0 Reputation points

2024-10-23T12:25:22.03+00:00

I am running into this issue now with language studio. Does anyone have an idea? I configured all the permissions here.

Accepted answer

YutongTie-MSFT 52,596 Reputation points

2024-08-21T17:44:13.4566667+00:00

Hello everyone,

Thanks for reaching out to us, there is some change just announced today for this behavior.

Please add the 'Storage Blob Data Contributor' role, it should resolve this issue.

We will add a notification in the doc so that avoiding this error anymore as below -

Please go to Azure Portal, go to the storage account you connected to your Azure Language resource, on the left panel, select Access Control, click the Add button and add the role as the second screenshot.

Add 'storage blob data contributor' role for the user on the storage account even though you are the owner of the storage account.

Please have a try and see how it works, the document team is working on adding more details so that there is less misunderstanding.

Regards,

Yutong

-Please kindly accept the answer if you feel helpful to support the community, thanks a lot.
Please sign in to rate this answer.

8 people found this answer helpful.
Pavel Gutin 80 Reputation points

2024-08-21T20:09:36.67+00:00

Where should this role be added?

David Jones 30 Reputation points

2024-08-22T01:28:48.0033333+00:00

It's not clear how to add this role to my language resource in Azure. It shows under list of available roles but doesn't show when I go to add it in Role Assignment.

I'm trying to create a custom text classification in Language Studio and its connecting to blog storage and doesn't allow me to select existing .json label document.

Can you please provide more specific details on how to add this?

YutongTie-MSFT 52,596 Reputation points

2024-08-22T02:17:38.7766667+00:00

@Pavel Gutin @David Jones

Of course. Please go to Azure Portal, go to the storage account you connected to your Azure Language resource, on the left panel, select Access Control, click the Add button and add the role as the second screenshot.

Add 'storage blob data contributor' role for the user on the storage account even though you are the owner of the storage account.

Please have a try and see how it works, the document team is working on adding more details so that there is less misunderstanding.

Regards,

Yutong

-Please kindly accept the answer if you feel helpful to support the community, thanks a lot.

David Jones 30 Reputation points

2024-08-22T15:24:15.02+00:00

This worked for me, adding the Role and adding my account as a User under Members.

FYI, I encountered this while working through the AI-102 Azure AI Engineer Associate study material online in MS Learn, if updating that material applies.

Thanks!

YutongTie-MSFT 52,596 Reputation points

2024-08-22T17:56:58.3533333+00:00

@Pavel Gutin Could you please confirm if this workaround works for you? If yes, please kindly accept the answer, if not, please let us know.

@David Jones Of course, will reach out to the team for fixing and updating the material as well.

Pavel Gutin 80 Reputation points

2024-08-24T12:32:37.2433333+00:00

It took me a while to get back to this, but I was able to confirm that it's working. Thank you for the detailed writeup.

EXT Dennis J Karlsson 0 Reputation points

2024-08-26T07:53:57.7+00:00

Works for me as well.

Davide Cremona 20 Reputation points

2024-08-30T11:17:27.87+00:00

working

DZIANIS DEV 20 Reputation points

2024-09-07T11:03:18.7866667+00:00

worked for me

Dave Yu 0 Reputation points

2024-09-11T03:56:40.27+00:00

After I added the role to the storage account and the user, it worked for me! (after 10-20 minutes)

Although I am confused on why do I need to explicitly add contributor role to my user (already an owner) in order to work...

almostajake 15 Reputation points

2024-09-22T21:17:28.56+00:00

Worked for me when added both Lang Service identity and User identity to Role. Thanks, all!

Richard John Kiddle 0 Reputation points

2024-10-12T07:25:11.1633333+00:00

Thank you. It seems that the user of the Language Studio is added as a guest user to the Azure tenant.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

5 additional answers

EXT Dennis J Karlsson 0 Reputation points

2024-08-21T14:41:56.6033333+00:00

Same error for me to. Anyone find a fix yet?
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Thanner, Andreas 0 Reputation points

2024-08-21T14:51:33.8933333+00:00

Okay, i fixed it now by creating the resources (storage account and language service) from scratch
Please sign in to rate this answer.
Lazar Kirven 0 Reputation points

2024-10-14T22:52:28.56+00:00

Same issue even if creating the resources (storage account and language service) from scratch. :-(
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Deleted

This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Comments have been turned off. Learn more
Pedro Henrique Tannus 0 Reputation points

2024-09-19T19:39:29.67+00:00

Works for me! Attention, it takes a few minutes fix the issue, after that, refresh the page.
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

How do I fix a 403 "This request is not authorized to perform this operation using this permission." error when accessing a newly created Language Studio project?

5 additional answers

Your answer