Document Intelligence Studio - Failed to access Blob container

Jan Schacherl 0

We are facing this issue within load projects in Document Intelligence Studio.

chyba

The strange thing is that this error appears randomly and not always. The CORS settings for storage are set according to the documentation.

User's image

Jan Schacherl 0 Reputation points

2024-12-14T05:55:59.82+00:00
Unfortunately, this did not help.

We have been using Form Recognizer few years. Before in older versions 2.0, and 2.1 we used fott for labeling documents. Now within version 3.1 (GA) we are using Document Intelligence Studio. Everything has worked for more than a year there, but issues started I guess one - two months ago. We did not change anything within the configuration of Form Recognizer resources and storage account. Currently, it is not even possible to use a Studio. It is very slow and errors randomly appear

Document Intelligence does not work with SAS when you create a project. It was in older FOTT

CORS are set up correctly as I sent in first question

We tried to create fresh new storage but it does not help, errors appear again

We did not change anything in firewall

We have five user accounts working in Studio. They all have Owner access. They all have issues. Unfortunately, only randomly. Sometimes Studio works and sometimes it doesn't. That's what's bothering us. Studio is not stable. At one moment, the Studio environment works for user one and at the same time, it doesn't work for user two. The problem always occurs the same way. Studio freezes and after a while one of these errors appears. Neither of them makes sense because we have everything set up correctly. User roles and Storage configuration

Thank you for your help
Nehruji R 8,161 Reputation points Microsoft Vendor

2024-12-16T06:20:13.4533333+00:00
The error message you got "This request is not authorized to perform this operation" indicates that the account you are using doesn't have the permission to access the container in the azure storage account, even you are Owner at subscription account level and if using same storage account you need to setup the storage and trusted signing account. Here are some possible reasons for this issue.

When you create an Azure Storage account, you are not automatically assigned permissions to access data via Microsoft Entra ID. You must explicitly assign yourself an Azure role for access to Blob Storage. You can assign it at the level of your subscription, resource group, storage account, or container.

Make sure that your account has the necessary permissions to access the container in the azure storage account. You can check the permissions by navigating to the storage account, select "Access Control (IAM)" and check the role assignments tab. Make sure your account has "Storage Blob Data Contributor" or "Storage Blob Data Reader " role assigned.

Storage Blob Data Contributor: Use to grant read/write/delete permissions to Blob storage resources.

Storage Blob Data Reader: Use to grant read-only permissions to Blob storage resources.

Make sure that your diagnostics settings for trusted signing account are set up properly. You can check this in Azure portal. Navigate to Storage account > Monitoring (Classic) > Diagnostic settings.

Reference:

https://learn.microsoft.com/en-us/azure/trusted-signing/how-to-sign-history#configure-diagnostic-settings

https://learn.microsoft.com/en-us/azure/storage/blobs/assign-azure-role-data-access?tabs=portal

Please let us know if you have any further queries. I’m happy to assist you further.
Nehruji R 8,161 Reputation points Microsoft Vendor

2024-12-19T12:34:21.45+00:00

Hi, we hope the provided answer helped if yes please accept the answer else, please let us know if you have any further queries. I’m happy to assist you further.
Jan Schacherl 0 Reputation points

2024-12-19T12:39:52.87+00:00

Hello, we are currently testing some changes and need more time to see if everything works. I will let you know the result I guess 23-24.12. I appreciate your patience

1 answer

Nehruji R 8,161 Reputation points Microsoft Vendor

2024-12-12T13:14:50.7333333+00:00
Hello Jan Schacherl,

Greetings! Welcome to Microsoft Q&A Platform.

I understand that you are getting error when load projects in Document Intelligence Studio with failure to access the blob container. Here are some common troubleshooting steps you can take to diagnose and resolve the issue:

Ensure that your Azure Blob Storage account is properly configured and accessible. If you are using a Shared Access Signature (SAS) to access the storage account, make sure that the SAS is still valid and has the necessary permissions (e.g., "write" permission) to upload files to the container.

CORS rules might have changed, causing issues with your access to files. Review and ensure that the allowed origins, methods, and headers are correctly configured for your blob storage. Double-check that the Access-Control-Allow-Origin header is set correctly and matches the origin of your requests. Also, ensure that other necessary headers like Access-Control-Allow-Methods and Access-Control-Allow-Headers are properly configured.

Test with Different Blob Storage Account: Create a new Blob Storage account (if possible) and try accessing it via the studio. This can help identify whether the issue is specific to the storage account or if it's related to your configuration.

Ensure that there are no network or firewall issues that might be preventing you from accessing the Blob Storage account.

Verify that you have the necessary permissions to access the storage account and container. You might need Contributor or Owner access to perform certain operations. similar thread for reference - https://learn.microsoft.com/en-us/answers/questions/1616183/document-intelligence-studio

Hope the above information helps! Please do let us know if you have any further queries. I’m happy to assist you further.

Please "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Document Intelligence Studio - Failed to access Blob container

1 answer

Your answer