Azure OpenAI Service
An Azure service that provides access to OpenAI’s GPT-3 models with enterprise capabilities.
I'm having the same problem !
What's the workaround?
Issue with API endpoints error when managing deployments in Microsoft Machine Learning Services workspace
Rajiv Jain
35
Reputation points
I am facing an issue where the workspace MSI doesn't have permissions to access online endpoints for my Microsoft Machine Learning Services workspace. The service invocation failed, and I received 403 Forbidden error when trying to access the API endpoints. The error message shows that S2S invocation to arm failed when calling the API endpoint. How can I resolve this issue? Please see the attached images for more details.
The workspace MSI does not have permissions to access online endpoints for this workspace. Service invocation failed! Request: GET management.azure.com/subscriptions/465c-9ccd-29efd226045c/resourceGroups/rgi/providers/Microsoft.MachineLearningServices/workspaces/rajiv-6421/onlineEndpoints Status Code: 403 Forbidden Reason Phrase: Forbidden Response Body: S2S invocation to arm failed when calling: https://management.azure.com/subscriptions/34e22a1e-0c5c-465c-9ccd5c/resourceGroups/r/providers/Microsoft.MachineLearningServices/workspaces/rajiv-6421/onlineEndpoints?api-version=2023-10-01&$skipToken=
You can still deploy the model under all projects, shared resources but cannot use the model...
Azure OpenAI Service
Foundry Tools
Foundry Tools
Formerly known as Azure AI Services or Azure Cognitive Services is a unified collection of prebuilt AI capabilities within the Microsoft Foundry platform
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(6.4, 79%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECY%3C/text%3E%3C/svg%3E)
Carlos Yazid Padilla Royero 0 Reputation points2024-09-19T00:23:12.1266667+00:00 I have the same problem
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(313.6, 69%, 40%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Ankur_Damle_Azure_AI 0 Reputation points2024-09-19T01:05:30.48+00:00 i have exactly same error , should i update my subscription?
-
Rajiv Jain 35 Reputation points
2024-09-19T01:39:09.8233333+00:00 I got some feedback from the Microsoft support team that product team has been involved as multiple folks reported similar issue.
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(83.2, 77%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EY9%3C/text%3E%3C/svg%3E)
YutongTie-9091 54,021 Reputation points Moderator2024-09-19T02:20:54.56+00:00 Hello Rajiv Jain
Thanks for reaching out to us, this issue is under investigate, it should be resolved soon. At the meantime, you can try to add contributor role and AI Administrator role as a work around, will let you know any news about this issue.
Regards,
Yutong
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Anonymous2024-09-19T10:40:31.33+00:00 Same issue here. Add that role where? My Azure user account? A resource's managed identity?
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(316.8, 49%, 40%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EL%3C/text%3E%3C/svg%3E)
LioTims 10 Reputation points2024-09-19T15:02:16.9233333+00:00 Hello,
I've got the same issue. Azure AI administrator role doesn't resolve it.
-
Rajiv Jain 35 Reputation points
2024-09-19T15:50:35.7866667+00:00 As per Microsoft suggestion I added Azure AI Administrator role and it worked.
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(249.60000000000002, 42%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMK%3C/text%3E%3C/svg%3E)
Martin Kňažovič 15 Reputation points2024-09-20T10:24:38.71+00:00 Any updates on how to resolve this issue? Adding Azure AI Administrator role or Owner didn't help.
-
Rajiv Jain 35 Reputation points
2024-09-20T10:59:58.22+00:00 Can you please let me know, what all resources you applied the role?
-
Martin Kňažovič 15 Reputation points
2024-09-20T12:26:04.27+00:00 On the associated subscription I have Service Administrator access and applied roles: Azure AI Administrator, Azure AI Developer and Owner
Sign in to comment
4 answers
Sort by: Most helpful
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(291.2, 32%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAB%3C/text%3E%3C/svg%3E)
Arindam Bandyopadhyay 16 Reputation points Microsoft Employee2024-10-09T10:06:43.27+00:00 -
Pablo Ariel Di Loreto 1 Reputation point MVP2024-09-25T01:27:31.13+00:00 Hello people! Same error when trying to add a Hub in Azure AI Studio. The operation (adding a hub in a Azure AI Service resource) finish fine, but the association between Hub & AI Resource never happen. When I try to add a manual linkn between Hub & AI Resource, an error 403 appear.
-
Rajiv Jain 35 Reputation points
2024-09-19T15:51:14.3133333+00:00 As per Microsoft suggestion I added Azure AI Administrator role and it worked.
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(291.2, 99%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAS%3C/text%3E%3C/svg%3E)
Anthony S 0 Reputation points2024-09-19T19:15:49.2366667+00:00 Hi Rajiv, did you grant the Azure AI Admin role to your user account or to the resources created in AI studio?
-
Pablo Ariel Di Loreto 1 Reputation point MVP
2024-09-25T01:28:19.0566667+00:00 I think to the resources created in AI Studio. But in my case, it did not work.
Sign in to comment -
-
YutongTie-9091 54,021 Reputation points Moderator
2024-09-19T15:12:20.4833333+00:00 Hello everyone and Rajiv,
Thanks for reporting this issue, product team just release a hotfix for this issue. For all new projects, you should see no issue.
For existing projects which are under this error, please first check on your top right to know which service you are using for your AI studio, then go to Azure Portal, search the service, and click on the Access Control button on the left panel, add the Azure AI Administrator role as below -
Please wait for at lease 15 mins.
I hope this helps!
Regards,
Yutong
-Please kindly accept the answer if you feel helpful to support the community, thanks a lot.