Issue with API endpoints error when managing deployments in Microsoft Machine Learning Services workspace

Question

I am facing an issue where the workspace MSI doesn't have permissions to access online endpoints for my Microsoft Machine Learning Services workspace. The service invocation failed, and I received 403 Forbidden error when trying to access the API endpoints. The error message shows that S2S invocation to arm failed when calling the API endpoint. How can I resolve this issue? Please see the attached images for more details.

The workspace MSI does not have permissions to access online endpoints for this workspace. Service invocation failed! Request: GET management.azure.com/subscriptions/465c-9ccd-29efd226045c/resourceGroups/rgi/providers/Microsoft.MachineLearningServices/workspaces/rajiv-6421/onlineEndpoints Status Code: 403 Forbidden Reason Phrase: Forbidden Response Body: S2S invocation to arm failed when calling: https://management.azure.com/subscriptions/34e22a1e-0c5c-465c-9ccd5c/resourceGroups/r/providers/Microsoft.MachineLearningServices/workspaces/rajiv-6421/onlineEndpoints?api-version=2023-10-01&$skipToken=

You can still deploy the model under all projects, shared resources but cannot use the model...

Answer 1

Hello everyone and Rajiv,

Thanks for reporting this issue, product team just release a hotfix for this issue. For all new projects, you should see no issue.

For existing projects which are under this error, please first check on your top right to know which service you are using for your AI studio, then go to Azure Portal, search the service, and click on the Access Control button on the left panel, add the Azure AI Administrator role as below -

Please wait for at lease 15 mins.

I hope this helps!

Regards,

Yutong

-Please kindly accept the answer if you feel helpful to support the community, thanks a lot.

Answer 2

As per Microsoft suggestion I added Azure AI Administrator role and it worked.

Answer 3

Hello people! Same error when trying to add a Hub in Azure AI Studio. The operation (adding a hub in a Azure AI Service resource) finish fine, but the association between Hub & AI Resource never happen. When I try to add a manual linkn between Hub & AI Resource, an error 403 appear.