Azure OpenAI Service
An Azure service that provides access to OpenAI’s GPT-3 models with enterprise capabilities.
3,449 questions
Unable to access AzureOpenAI
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(169.60000000000002, 85%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EK%3C/text%3E%3C/svg%3E)
Kannanc
0
Reputation points
I have a AzureOpenAI Chat playground setup with a deployment of gpt-4o model. I am trying to access it to integrate with our application, but unable to access it. I have a Cognitive Services OpenAI contributor role assigned for OpenAI Service access, and contributor role to the resource group. But I am receiving the following error while attempt to access:
openai.AuthenticationError: Error code: 401 - {'error': {'code': 'PermissionDenied', 'message': 'Principal does not have access to API/Operation.'}}
What might be wrong?
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(281.6, 88%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESA%3C/text%3E%3C/svg%3E)
Saideep Anchuri 590 Reputation points Microsoft Vendor2024-12-24T14:06:03.4366667+00:00 Hi Kannanc
Welcome to Microsoft Q&A Forum, thank you for posting your query here!
I understand that you are encountering an issue, it seems that there may be an issue with the authentication process when attempting to access the Azure OpenAI service. Even the Cognitive Services OpenAI Contributor role has been assigned, ensure that the user or service principal you're using for authentication has the required permissions that is making the API calls. You can check this in the Azure portal under the "Access control (IAM)" section of your Azure OpenAI resource.
Kindly refer the below documentation: https://learn.microsoft.com/en-us/azure/ai-studio/concepts/rbac-ai-studio#troubleshooting
Thank You.
-
Kannanc 0 Reputation points
2024-12-24T14:56:01.59+00:00 Sorry, this answer is not helpful.
-
Saideep Anchuri 590 Reputation points Microsoft Vendor
2024-12-24T15:57:04.4766667+00:00 Hi Kannanc
Sorry for the inconvenience. Ideally in a public resource, A cognitive service OpenAI contributor on user and any target resources (e.g. A custom webapp) can enable inference on the endpoint but if it is secured against virtual network then user and resource also have minimal virtual network permission to interact over virtual network.
Virtual network minimal roles for user and webapp.
- "Microsoft.Network/*/read" on the virtual network resource. This permission isn't needed for Azure Resource Manager (ARM) template deployments.
- "Microsoft.Network/virtualNetworks/join/action" on the virtual network resource.
- "Microsoft.Network/virtualNetworks/subnets/join/action" on the subnet resource.
Could you confirm whether it is public or private resource one.
Thank You.
Sign in to comment
Sign in to answer