I am trying to create a new Custom Text Classification project in the Language Studio. When I go to select the document that contains all my labels, I receive the following error: The portal cannot access your storage account "mystorageaccount", please enable CORS policies on your storage account What I have tried to fix the issue: Updating CORS policy on my storage account Making sure my Language Resource has the "Storage Blob Data Contributor" Role When I look at the Network tab in my browser, I see the request being made to a URL that contains blob.core. windows .net . However, when I look at my containers properties, the URL is blob.core. usgovcloudapi .net What can I do to update the domain for this call? Are there any workarounds or suggestions?

How to fix Language Studio calling the wrong domain when trying to access storage account?

Cara Anderson 0

I am trying to create a new Custom Text Classification project in the Language Studio. When I go to select the document that contains all my labels, I receive the following error:

The portal cannot access your storage account "mystorageaccount", please enable CORS policies on your storage account

What I have tried to fix the issue:

Updating CORS policy on my storage account
Making sure my Language Resource has the "Storage Blob Data Contributor" Role

When I look at the Network tab in my browser, I see the request being made to a URL that contains blob.core.windows.net. However, when I look at my containers properties, the URL is blob.core.usgovcloudapi.net What can I do to update the domain for this call? Are there any workarounds or suggestions?

YutongTie-MSFT 53,351 Reputation points

2024-11-26T20:50:54.47+00:00
@Cara Anderson Thanks for reaching out to us! Could you please try to add the Storage Blob Data Contributor role to your storage account? And also make sure your Azure Language Services has an owner or contributor role. (I think you have it.) Your policy seems good.

Reference for your storage account set up -

Roles for your storage account

Go to your storage account page in the Azure portal.

Select Access Control (IAM) in the left navigation menu.

Select Add to Add Role Assignments, and choose the Storage blob data contributor role on the storage account.

Within Assign access to, select Managed identity.

Select Select members

Select your subscription, and Language as the managed identity. You can search for user names in the Select field.

Document you may want to take a look - https://learn.microsoft.com/en-us/azure/ai-services/language-service/custom-text-classification/how-to/create-project?tabs=language-studio%2Cstudio%2Cmulti-classification#roles-for-your-storage-account

I hope this helps!

Regards,

Yutong
Cara Anderson 0 Reputation points

2024-11-26T21:17:19.96+00:00

Hello @YutongTie-MSFT ! I've double check and my Language Resource already has the Storage blob data contributor role as well as the Contributor role on my storage account. As far as I'm aware, those are the only roles necessary correct?
YutongTie-MSFT 53,351 Reputation points

2024-11-26T21:54:15.1666667+00:00

@Cara Anderson Thanks for your response, let's double check on the roles.

For Language Services, you need owner/contributor role assigned to yourself(user)

For Storage account, you need Storage blob data contributor assigned to Language as the managed identity, I just created one for your reference. Please take a look, and let us know. If it is not working, I am happy to enable you a free support ticket so that a support engineer can check with you 1:1

The CORS policy I am using is as below - Set allowed origins field to https://language.cognitive.azure.com.

I just tried above process, and it works for me, please have a try and let us know.

Regards,

Yutong
YutongTie-MSFT 53,351 Reputation points

2024-11-27T20:46:32.6266667+00:00

@Cara Anderson

We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.

Moreover, please also have a try if above solution not working to you, please try to use a general storage not a gov storage, it may be some limit for gov storage.

I hope this helps!

Regards,

Yutong
romungi-MSFT 47,526 Reputation points Microsoft Employee

2024-11-29T08:19:18.3066667+00:00

@Cara Anderson Did you get a chance to try this scenario with a public cloud storage account? I think this is not supported if you use a gov cloud storage account.
Cara Anderson 0 Reputation points

2024-12-02T14:29:13.05+00:00

@romungi-MSFT @YutongTie-MSFT yes, this scenario works for me with my public storage account, but I'm trying to get it setup with a gov cloud storage. The documentation is showing its possible, but I can't seem to get it working after adding the necessary Storage blob data contributor role and updating the CORS policy. Any support help is definitely appreciated!
YutongTie-MSFT 53,351 Reputation points

2024-12-02T18:51:06.67+00:00

@Cara Anderson Thanks for your response, Azure Government is a separate instance of the Microsoft Azure service, I think the problem may be caused by mixing of gov account and public account, I would suggest you raise a support ticket for this issue to get further assistant with Azure Gov team. Please let me know if you have no support plan, we are happy to able you a free ticket for this case.

Regards,

Yutong
Cara Anderson 0 Reputation points

2024-12-02T19:17:39.1133333+00:00

@YutongTie-MSFT thank you for your help! As far as I'm aware, my gov account does not have a support plan. Any help setting up that ticket would be great!
Cara Anderson 0 Reputation points

2024-12-02T19:19:20.2933333+00:00

(apologies my previous comment wasn't showing as sent)
YutongTie-MSFT 53,351 Reputation points

2024-12-02T21:17:45.4033333+00:00

@Cara Anderson Of course, please share your Azure Subscription ID to me via private message, so that I can do the needful actions. I will ping you there also.

Share via

How to fix Language Studio calling the wrong domain when trying to access storage account?

Your answer