How can I get past authentication type error when adding a datasource to my AzureOpenAI deployment ?

Question

How can I get past authentication type error when adding a datasource to my AzureOpenAI deployment ?

Andrei Tudorica 15

When trying to add a data source (for example, blob storage) to a azure openai deployment model I get the an error with no additional details:

"Failed to validate the selected authentication type. Please resolve the following errors and click next."

There are no "following errors" displayed.

User's image

The roles described at https://learn.microsoft.com/en-us/azure/ai-services/openai/how-to/use-your-data-securely#role-assignments are in place.

In the browser console I can see https://<myAzureOpenAiInstance>.openai.azure.com/openai/on-your-data-validation?api-version=2023-03-31-preview has failed with 404 (not found)

Andrei Tudorica 15 Reputation points

2024-10-21T20:14:09.78+00:00

Screenshot on where in Azure OpenAI Studio I try to add the data source:
SRILAKSHMI C 11,135 Reputation points Microsoft External Staff Moderator

2024-10-22T10:13:42.4633333+00:00

Hello Andrei Tudorica,

Thank you for reaching out to Microsoft Q&A forum!

To resolve the errors related to system-assigned managed identities and RBAC authentication in Azure, follow these steps:

First, the error indicating that "The Azure AI Search resource has disabled RBAC authentication" can be resolved by enabling Role-Based Access Control (RBAC) for the Azure AI Search resource. This will allow your system to securely manage access. Navigate to the Azure portal, locate the Azure AI Search resource, and enable RBAC under the access control settings. Ensure that the necessary roles are assigned, such as the Search Index Contributor role.

Second, both Azure OpenAI and Azure AI Search have disabled system-assigned managed identities, which means that your resources cannot use this feature for identity management. To resolve this, go to each respective resource in the Azure portal, open the Identity tab, and toggle System-Assigned Managed Identity to On. After enabling this, ensure that the managed identity is assigned the proper permissions in the Access Control (IAM) section.

If enabling system-assigned managed identities still results in errors, as an alternative, you can use API keys for authentication. Both Azure AI Search and Azure OpenAI provide API keys under the Keys section. Generate an API key and configure your application to use the key, ensuring a seamless authentication process without further errors.

By either enabling managed identities with proper permissions or switching to API key authentication, your system should run without any further issues.

I hope you understand. And, if you have any further query do let us know.

Thank you!
SRILAKSHMI C 11,135 Reputation points Microsoft External Staff Moderator

2024-10-23T09:33:43.7133333+00:00

Hi Andrei Tudorica,

Following up to see if the above response was helpful. Thank you!
SRILAKSHMI C 11,135 Reputation points Microsoft External Staff Moderator

2024-10-24T09:17:08.1033333+00:00

Hello Andrei Tudorica,

Did you got any chance to check the above provided response? Thank you!
Andrei Tudorica 15 Reputation points

2024-10-30T11:55:03.6+00:00

Hi @Anonymous ,

Thank you for your answer.

Unfortunately, the items you've suggested on managed identities were already there as part of my setup.

I've posted an answer with what worked for me.
SRILAKSHMI C 11,135 Reputation points Microsoft External Staff Moderator

2024-11-06T04:51:26.8066667+00:00

Hi Andrei Tudorica,

Glad to know that your issue has been resolved. And thanks for sharing the solution, which might be beneficial to other community members reading this thread. Thank you!

1 answer

Your answer

Andrei Tudorica 15 Reputation points

2024-10-21T20:14:09.78+00:00

Screenshot on where in Azure OpenAI Studio I try to add the data source:
SRILAKSHMI C 11,135 Reputation points Microsoft External Staff Moderator

2024-10-22T10:13:42.4633333+00:00

Hello Andrei Tudorica,

Thank you for reaching out to Microsoft Q&A forum!

To resolve the errors related to system-assigned managed identities and RBAC authentication in Azure, follow these steps:

First, the error indicating that "The Azure AI Search resource has disabled RBAC authentication" can be resolved by enabling Role-Based Access Control (RBAC) for the Azure AI Search resource. This will allow your system to securely manage access. Navigate to the Azure portal, locate the Azure AI Search resource, and enable RBAC under the access control settings. Ensure that the necessary roles are assigned, such as the Search Index Contributor role.

Second, both Azure OpenAI and Azure AI Search have disabled system-assigned managed identities, which means that your resources cannot use this feature for identity management. To resolve this, go to each respective resource in the Azure portal, open the Identity tab, and toggle System-Assigned Managed Identity to On. After enabling this, ensure that the managed identity is assigned the proper permissions in the Access Control (IAM) section.

If enabling system-assigned managed identities still results in errors, as an alternative, you can use API keys for authentication. Both Azure AI Search and Azure OpenAI provide API keys under the Keys section. Generate an API key and configure your application to use the key, ensuring a seamless authentication process without further errors.

By either enabling managed identities with proper permissions or switching to API key authentication, your system should run without any further issues.

I hope you understand. And, if you have any further query do let us know.

Thank you!
SRILAKSHMI C 11,135 Reputation points Microsoft External Staff Moderator

2024-10-23T09:33:43.7133333+00:00

Hi Andrei Tudorica,

Following up to see if the above response was helpful. Thank you!
SRILAKSHMI C 11,135 Reputation points Microsoft External Staff Moderator

2024-10-24T09:17:08.1033333+00:00

Hello Andrei Tudorica,

Did you got any chance to check the above provided response? Thank you!
Andrei Tudorica 15 Reputation points

2024-10-30T11:55:03.6+00:00

Hi @Anonymous ,

Thank you for your answer.

Unfortunately, the items you've suggested on managed identities were already there as part of my setup.

I've posted an answer with what worked for me.
SRILAKSHMI C 11,135 Reputation points Microsoft External Staff Moderator

2024-11-06T04:51:26.8066667+00:00

Hi Andrei Tudorica,

Glad to know that your issue has been resolved. And thanks for sharing the solution, which might be beneficial to other community members reading this thread. Thank you!

Answer 1

Andrei Tudorica 15

The issues seemed to be on the Region selected.

I had Poland Central for the storage account, ai openai and search service with all the roles added needed for a managed identity setup.

With Inspect in the browser I could find in the Network tab in one of the calls at one point the following message.

Access denied due to invalid subscription key or wrong API endpoint. Make sure to provide a valid key for an active subscription and use a correct regional API endpoint for your resource.

Although my RG is North Europe, I've created a new set of storage account, ai openai and search service in EastUS with the same group of roles for the managed identity configuration and it worked.

I believe Azure is still asigning "behind the scenes" the resources in another region if not available in the one selected generating the problem I was facing.

Filip Kusalík 0 Reputation points

2024-10-30T14:56:36.8466667+00:00

Yes, exactly. As seen here https://learn.microsoft.com/en-us/azure/ai-services/openai/concepts/use-your-data?tabs=ai-search%2Ccopilot#regional-availability-and-model-support

If your Azure OpenAI resource is in another region, you won't be able to use Azure OpenAI On Your Data.

For me the problem is that I want to have 4o model deployed in GDPR compliant area which has to be in Europe. But according to table, there is no option for 4o in EU :)

Share via

How can I get past authentication type error when adding a datasource to my AzureOpenAI deployment ?

1 answer

Your answer