Azure OpenAI Service
An Azure service that provides access to OpenAI’s GPT-3 models with enterprise capabilities.
2,945 questions
What are the permissions needed for a user to deploy chat as a web app in Azure OpenAI?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(182.40000000000003, 87%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ELM%3C/text%3E%3C/svg%3E)
Lavan Mahes
0
Reputation points
Getting the below error when trying to deploy the chat as a web app in Azure OpenAI. I have added admin role to the resource group (arg-ae-hnz-na-snd-genai-01) but still getting the same error.
Error:
The template deployment failed with error: 'Authorization failed for template resource '2934dee6-ed77-526e-b898-530cba829db5' of type 'Microsoft.Authorization/roleAssignments'. The client 'Lavan.Mahes@TeWhatuOra.govt.nz' with object id 'bbc98685-99b7-45c6-9e41-31411d616582' does not have permission to perform action 'Microsoft.Authorization/roleAssignments/write' at scope '/subscriptions/d0411f07-b2fd-4a53-84bf-33eaa2e20136/resourceGroups/arg-ae-hnz-na-snd-genai-01/providers/Microsoft.CognitiveServices/accounts/dev-tuhi-clinicalnotesynthesis/providers/Microsoft.Authorization/roleAssignments/2934dee6-ed77-526e-b898-530cba829db5'.'.
Trace ID : 54aafebe-66d1-4220-a2fd-c529ff1298a5
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(214.4, 74%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAM%3C/text%3E%3C/svg%3E)
AshokPeddakotla-MSFT 33,026 Reputation points2024-09-19T03:32:52.2433333+00:00 Lavan Mahes Greetings & Welcome to Microsoft Q&A forum!
Make sure that you're assigned at least the Cognitive Services Contributor role for the Azure OpenAI resource.
The following table summarizes the RBAC role assignments needed for all Azure resources associated with your application.
For more details, see Role-based access control for Azure OpenAI Service and Assign Azure roles using the Azure portal.
Do let me know if that helps or have any further queries.
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(249.60000000000002, 57.00000000000001%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDF%3C/text%3E%3C/svg%3E)
Daniel FANG 80 Reputation points2024-09-19T07:57:00.2766667+00:00 Hey Lavan
If we just read this specific error message, it is saying that the user (probably your account: Lavan.Mahes@TeWhatuOra.govt.nz, as you are deploying the web app) does not have permission to update the role assignment of Microsoft.CognitiveServices under resource group arg-ae-hnz-na-snd-genai-01.
"The client 'Lavan.Mahes@TeWhatuOra.govt.nz' with object id 'bbc98685-99b7-45c6-9e41-31411d616582' does not have permission to perform action 'Microsoft.Authorization/roleAssignments/write' at scope '/subscriptions/d0411f07-b2fd-4a53-84bf-33eaa2e20136/resourceGroups/arg-ae-hnz-na-snd-genai-01/providers/Microsoft.CognitiveServices/accounts/dev-tuhi-clinicalnotesynthesis/providers/Microsoft.Authorization/roleAssignments/2934dee6-ed77-526e-b898-530cba829db5'.'."
So, I think you need to give your email/account more permission in CognitiveServices (try out Cognitive Services Contributor or go with Owner as a test).
Sign in to comment
Sign in to answer