This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
I am facing an issue where the workspace MSI doesn't have permissions to access online endpoints for my Microsoft Machine Learning Services workspace. The service invocation failed, and I received 403 Forbidden error when trying to access the API endpoints. The error message shows that S2S invocation to arm failed when calling the API endpoint. How can I resolve this issue? Please see the attached images for more details.
The workspace MSI does not have permissions to access online endpoints for this workspace. Service invocation failed! Request: GET management.azure.com/subscriptions/465c-9ccd-29efd226045c/resourceGroups/rgi/providers/Microsoft.MachineLearningServices/workspaces/rajiv-6421/onlineEndpoints Status Code: 403 Forbidden Reason Phrase: Forbidden Response Body: S2S invocation to arm failed when calling: https://management.azure.com/subscriptions/34e22a1e-0c5c-465c-9ccd5c/resourceGroups/r/providers/Microsoft.MachineLearningServices/workspaces/rajiv-6421/onlineEndpoints?api-version=2023-10-01&$skipToken=
You can still deploy the model under all projects, shared resources but cannot use the model...
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(6.4, 79%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECY%3C/text%3E%3C/svg%3E)
I have the same problem
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(313.6, 69%, 40%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
i have exactly same error , should i update my subscription?
I got some feedback from the Microsoft support team that product team has been involved as multiple folks reported similar issue.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(278.4, 1%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EYM%3C/text%3E%3C/svg%3E)
Hello Rajiv Jain
Thanks for reaching out to us, this issue is under investigate, it should be resolved soon. At the meantime, you can try to add contributor role and AI Administrator role as a work around, will let you know any news about this issue.
Regards,
Yutong
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(268.8, 20%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECP%3C/text%3E%3C/svg%3E)
Same issue here. Add that role where? My Azure user account? A resource's managed identity?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(316.8, 49%, 40%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EL%3C/text%3E%3C/svg%3E)
Hello,
I've got the same issue. Azure AI administrator role doesn't resolve it.
How about adding contributor role?
For update today, I have seen product team acknowledged this issue and working on the fix, I hope we can get the fix soon.
Regards,
Yutong
As per Microsoft suggestion I added Azure AI Administrator role and it worked.
As per Microsoft suggestion I added Azure AI Administrator role and it worked.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(291.2, 99%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAS%3C/text%3E%3C/svg%3E)
Hi Rajiv, did you grant the Azure AI Admin role to your user account or to the resources created in AI studio?