"Authorization failed for container registry to access image details" error.

Orhan Ozdemir 5

I am trying to deploy a model from a prompt flow.

However deployments fail with the error message given below.

Sai Krishna Katakam 700 Reputation points Microsoft Vendor

2024-09-02T19:05:45.1233333+00:00

Hi Orhan Ozdemir,

Just checking in to see if you have got a chance to see the answer posted by Akinbade abiola in resolving the issue.

If it was helpful, please click "Upvote and Accept Answer" on his post to let us know.

We're here to help, so if you have any further questions, don't hesitate to ask.

Thank You.

1 answer

akinbade abiola 18,305 Reputation points

2024-09-02T14:13:37.3+00:00

You need to ensure he service trying to access the ACR is properly authenticated. I will recommend configuring a managed Identitiy for this. You can then assign a reader or contributor role to this:

Assign Azure roles to a managed identity (Preview)

To create a managed Identity you can:

In the left-hand menu, select Identity under the Settings section.

Under the System-assigned tab, switch the Status to On.

Click Save. This will create a system-assigned managed identity.

Also See:

https://learn.microsoft.com/en-us/azure/container-registry/container-registry-troubleshoot-login

https://learn.microsoft.com/en-us/azure/container-registry/container-registry-roles?tabs=azure-cli

You can mark it 'Accept Answer' and 'Upvote' if this helped you

Regards,

Abiola
Please sign in to rate this answer.
Orhan Ozdemir 5 Reputation points

2024-09-05T07:23:05.8+00:00

what type of identity needs to be configured to deploy the model to a web app?

Sai Krishna Katakam 700 Reputation points Microsoft Vendor

2024-09-05T22:12:48.7533333+00:00

Hi Orhan Ozdemir,

You can use either a system-assigned or user-assigned managed identity for your web app to authenticate against the Azure Container Registry (ACR).

Enable a Managed Identity for the Web App:

Navigate to your Web App in the Azure portal.

Under the Settings section, select Identity.

Choose System-assigned or User-assigned depending on your use case and turn it On.

More information on how to assign a managed identity can be found here: Assign a managed identity to an Azure resource

After creating the managed identity, you need to assign it the necessary roles to access the Azure Container Registry (ACR). Typically, you would assign the Reader or Contributor role to the managed identity.

For more detailed guidance, you can refer to the following Microsoft documentation: Assign Azure roles to a managed identity

If you have any further queries, do let us know. If the answer is helpful, please click "Accept Answer and Upvote".

Thank you.

Sai Krishna Katakam 700 Reputation points Microsoft Vendor

2024-09-06T20:04:21.6+00:00

Hi Orhan Ozdemir,

Just checking in to see if you had a chance to see my comment to your question. Please tell us if it was helpful and feel free to reach out to us if you have any queries.

If it was helpful, please click "Upvote" on his post to let us know.

Thank You.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

"Authorization failed for container registry to access image details" error.

1 answer

Your answer