How to create agents with Python?

Question

How to create agents with Python?

Tran Phuoc Truong Vu 0

I used code example this link: https://learn.microsoft.com/en-us/azure/ai-services/agents/quickstart?pivots=programming-language-python-azure

I also grant role Onwer and PM in this link: https://learn.microsoft.com/en-us/azure/ai-foundry/concepts/rbac-azure-ai-foundry?pivots=fdp-project

But I can't run code example. Please help me this issue

azure.core.exceptions.ClientAuthenticationError: (PermissionDenied) The principal xxxxx lacks the required data action Microsoft.CognitiveServices/accounts/AIServices/agents/write to perform POST /api/projects/{projectName}/assistants operation. For instructions on granting the necessary permissions, see https://aka.ms/FoundryPermissions.

Code: PermissionDenied

Sampath 3,750 Reputation points Microsoft External Staff Moderator

2025-06-12T07:20:16.6066667+00:00
Hello @Tran Phuoc Truong Vu ,

You're definitely close, but that PermissionDenied error is the key clue: your identity is missing the required data action Microsoft.CognitiveServices/accounts/AIServices/agents/write.

Here’s how to fix it:

Even if you're an Owner or Project Manager, those roles might not include the specific data actions needed for agent creation.

You need to assign a custom role or a built-in role that includes:

Microsoft.CognitiveServices/accounts/AIServices/agents/write

Follow the steps in this Microsoft guide to:

Create a custom role with the required data actions.

Assign that role to your user or service principal at the Azure AI Project scope.

Make sure your Python code uses DefaultAzureCredential() and that:

You’ve run az login in your terminal.

Your default subscription is the one containing the Azure AI Project.

You can verify with:

az account show

Make sure you’ve installed the right package:

pip install azure-ai-agents

And that your code follows the structure shown in the official Python quickstart.

Your answer

Sampath 3,750 Reputation points Microsoft External Staff Moderator

2025-06-12T07:20:16.6066667+00:00

Hello @Tran Phuoc Truong Vu ,

You're definitely close, but that PermissionDenied error is the key clue: your identity is missing the required data action Microsoft.CognitiveServices/accounts/AIServices/agents/write.

Here’s how to fix it:

Even if you're an Owner or Project Manager, those roles might not include the specific data actions needed for agent creation.

You need to assign a custom role or a built-in role that includes:

Microsoft.CognitiveServices/accounts/AIServices/agents/write

Follow the steps in this Microsoft guide to:

Create a custom role with the required data actions.

Assign that role to your user or service principal at the Azure AI Project scope.

Make sure your Python code uses DefaultAzureCredential() and that:

You’ve run az login in your terminal.

Your default subscription is the one containing the Azure AI Project.

You can verify with:

az account show

Make sure you’ve installed the right package:

pip install azure-ai-agents

And that your code follows the structure shown in the official Python quickstart.

Share via

How to create agents with Python?

Your answer