I have the same issue... can not figure out why.. @Shoichi Kawanishi/川西 祥一 did you figure it out?
Azure AI Studioでプロジェクトが作成できない
Azure AI Stsudioのハブ、およびプロジェクトの作成の際、カスタム接続を作成できませんでした ForbiddentError(User Error (Create workspace connection failed.))というエラーが発生し、プロジェクトを作成できません。ハブは作成できるのですが、プロジェクトが作成できない状況です。特に対策方法なども出てこないので、ご存じの方おられましたら対策方法を教えてください。
-
-
Shoichi Kawanishi/川西 祥一 0 評価のポイント
2024-07-04T23:19:09.9666667+00:00 I contacted technical support and it was resolved.
Here is the documentation from technical support:
As you know, the various errors you reported this time were caused by "insufficient permissions".
In particular, the errors occurred because the permissions required for the operation to update/change the "Azure AI Hub resource" you created were not assigned to the operating user.
As a premise, Azure AI Hub resources have functions in common with another Azure service, "Azure Machine Learning Service".
As a result, from the perspective of "resource providers" related to the management of operation permissions, they are not assigned to a specific resource provider, but are based on the concept of Azure Machine Learning Service.
Reference: Azure AI Studio architecture
https://learn.microsoft.com/ja-jp/azure/ai-studio/concepts/architecture
In light of this, the operations performed in the attached document mainly require the following operation permissions.
- Azure OpenAI Service connection
o Permission to view resource information and authentication information (API key) of the target Azure OpenAI Service
o Permission to create "connections" for Azure AI Hub or Azure Machine Learning Service and store authentication information (key)
- Azure AI Search connection
o Permission to view resource information and authentication information (API key) of the target Azure AI Search
o Permission to create "connections" for Azure AI Hub or Azure Machine Learning Service and store authentication information (key)
- External storage connection (assuming Azure Blob Storage)
o Permission to view resource information of the target Azure Blob Storage (key reference permission is not required because key information is entered manually)
o Permission to create "datastore" for Azure AI Hub or Azure Machine Learning Service and store authentication information (key)
- Azure AI project creation
o Permission to create "project" for Azure AI Hub or Azure Machine Learning Service
Some of the above various permissions to update created resources The error you pointed out occurred because of a missing part.
As a workaround, you can assign a role to your account that allows you to perform Azure Machine Learning Service-related modification operations (Write/Action/Delete) by referring to the following document that you have already referred to.
Reference: Managing Access to Azure Machine Learning Workspaces
- For built-in roles, the role "Contributor" is an example, and for custom roles, the role "Workspace Administrator" is an example.