How do I fix a 403 "This request is not authorized to perform this operation using this permission." error when accessing a newly created Language Studio project?

Pavel Gutin 80 Reputation points
2024-08-17T21:31:13.9+00:00

I am trying to work my way through the Extract Custom Entities exercise. I am running into an issue when trying to access a newly created project. I can get though the creation steps, but when I click on the project, I get a 403 error that states "This request is not authorized to perform this operation using this permission."

Here are the things that I already tried after some troubleshooting:

  1. I made sure that I am creating the project with the same storage account. (I only have a single one)
  2. I checked to make sure that my storage account has "Blob anonymous access" Enabled User's image
  3. I checked that CORS is properly set
    User's image
  4. I checked that container has the right access level
    User's image
  5. I am out of ideas of what to try next.
Azure AI Language
Azure AI Language
An Azure service that provides natural language capabilities including sentiment analysis, entity extraction, and automated question answering.
426 questions
Azure AI services
Azure AI services
A group of Azure services, SDKs, and APIs designed to make apps more intelligent, engaging, and discoverable.
2,931 questions
{count} votes

Accepted answer
  1. YutongTie-MSFT 53,211 Reputation points
    2024-08-21T17:44:13.4566667+00:00

    Hello everyone,

    Thanks for reaching out to us, there is some change just announced today for this behavior.

    Please add the 'Storage Blob Data Contributor' role, it should resolve this issue.

    We will add a notification in the doc so that avoiding this error anymore as below -

    User's image

    Please go to Azure Portal, go to the storage account you connected to your Azure Language resource, on the left panel, select Access Control, click the Add button and add the role as the second screenshot.

    User's image

    Add 'storage blob data contributor' role for the user on the storage account even though you are the owner of the storage account.

    User's image

    Please have a try and see how it works, the document team is working on adding more details so that there is less misunderstanding.

    Regards,

    Yutong

    -Please kindly accept the answer if you feel helpful to support the community, thanks a lot.

    8 people found this answer helpful.

5 additional answers

Sort by: Most helpful
  1. Sina Atabaki 0 Reputation points
    2024-10-27T17:15:52.5266667+00:00

    For me it worked, after setting the CORS settings and giving the 'storage blob data contributor' Role to your own user as mentioned above

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.