What are the permissions needed for a user to deploy chat as a web app in Azure OpenAI?

Question

Getting the below error when trying to deploy the chat as a web app in Azure OpenAI. I have added admin role to the resource group (arg-ae-hnz-na-snd-genai-01) but still getting the same error.

Error:
The template deployment failed with error: 'Authorization failed for template resource '2934dee6-ed77-526e-b898-530cba829db5' of type 'Microsoft.Authorization/roleAssignments'. The client 'Lavan.Mahes@TeWhatuOra.govt.nz' with object id 'bbc98685-99b7-45c6-9e41-31411d616582' does not have permission to perform action 'Microsoft.Authorization/roleAssignments/write' at scope '/subscriptions/d0411f07-b2fd-4a53-84bf-33eaa2e20136/resourceGroups/arg-ae-hnz-na-snd-genai-01/providers/Microsoft.CognitiveServices/accounts/dev-tuhi-clinicalnotesynthesis/providers/Microsoft.Authorization/roleAssignments/2934dee6-ed77-526e-b898-530cba829db5'.'.

Trace ID : 54aafebe-66d1-4220-a2fd-c529ff1298a5

Answer 1

Lavan Mahes Greetings & Welcome to Microsoft Q&A forum!

Make sure that you're assigned at least the Cognitive Services Contributor role for the Azure OpenAI resource.

The following table summarizes the RBAC role assignments needed for all Azure resources associated with your application.

For more details, see Role-based access control for Azure OpenAI Service and Assign Azure roles using the Azure portal.

Do let me know if that helps or have any further queries.