Can not see roles in IAM in search service

Question

I’m using the search service, but in IAM I only see the Search Service Contributor and Search Service Reader roles. I expected to see additional roles, such as the Search Index Data Reader. Could you please help clarify or advise how to enable it?

Answer 1

Hello Zhijing Ye,

As discussed over the call, this is happening because your role assignment has a condition applied. With this setup, you’re only allowed to assign a limited set of roles, so roles like Search Index Data Reader won’t appear in the list.

The condition filters which roles you can see and assign. If a role isn’t included in that condition, it won’t be visible in IAM even though it exists.

To resolve this, someone with sufficient permissions needs to update your access. They can either remove the condition if it’s not required, or add Search Index Data Reader to the allowed roles. Once updated, the role will appear during assignment.

This is due to the RBAC condition on your access, not an issue with Azure AI Search. I’ve also shared the details of a user who has permanent access without conditions. You can check with them to help update this.