Merge branch 'main' of https://github.com/MicrosoftDocs/azure-ai-docs-pr into how-to-guides-for-clu

Author: paulth1

articles/ai-foundry/concepts/rbac-azure-ai-foundry.md

@@ -9,7 +9,7 @@ ms.custom:
   - build-2024
   - ignite-2024
 ms.topic: conceptual
-ms.date: 03/04/2025
+ms.date: 06/04/2025
 ms.reviewer: deeikele
 ms.author: larryfr
 author: Blackmist
@@ -222,10 +222,10 @@ For example, if you're trying to consume a new Blob storage, you need to ensure
 
 If you're an owner of a Foundry account resource, you can add and remove roles for Azure AI Foundry. From the **Home** page in [Azure AI Foundry](https://ai.azure.com/?cid=learnDocs), select your Foundry resource. Then select **Users** to add and remove users for the hub. You can also manage permissions from the [Azure portal](https://portal.azure.com) under **Access Control (IAM)** or through the Azure CLI.
 
-For example, use the Azure CLI to assign the Azure AI User role to `[email protected]` for resource group `this-rg` with the following command:
+For example, the following command assigns Azure AI User role to `[email protected]` for resource group `this-rg` in the subscription with an ID of `00000000-0000-0000-0000-000000000000`:
 
 ```azurecli
-az role assignment create --role "Azure AI User" --assignee "[email protected]" --resource-group this-rg 
+az role assignment create --role "Azure AI User" --assignee "[email protected]" --scope /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/this-rg 
 ```
 
 ## Create custom roles
@@ -461,10 +461,10 @@ For example, if you're trying to consume a new Blob storage, you need to ensure
 
 ## Manage access with roles 
 
-If you're an owner of a hub, you can add and remove roles for Azure AI Foundry. Go to the **Home** page in [Azure AI Foundry](https://ai.azure.com/?cid=learnDocs) and select your hub. Then select **Users** to add and remove users for the hub. You can also manage permissions from the Azure portal under **Access Control (IAM)** or through the Azure CLI. For example, use the [Azure CLI](/cli/azure/) to assign the Azure AI Developer role to "[email protected]" for resource group "this-rg" with the following command: 
+If you're an owner of a hub, you can add and remove roles for Azure AI Foundry. Go to the **Home** page in [Azure AI Foundry](https://ai.azure.com/?cid=learnDocs) and select your hub. Then select **Users** to add and remove users for the hub. You can also manage permissions from the Azure portal under **Access Control (IAM)** or through the Azure CLI. For example, to assign the Azure AI Developer role to "[email protected]" for resource group "this-rg" in the subscription with an ID of `00000000-0000-0000-0000-000000000000`, you can use the following Azure CLI command: 
  
 ```azurecli-interactive
-az role assignment create --role "Azure AI Developer" --assignee "[email protected]" --resource-group this-rg 
+az role assignment create --role "Azure AI Developer" --assignee "[email protected]" --scope /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/this-rg 
 ```
 
 ## Create custom roles

articles/ai-foundry/how-to/configure-managed-network.md

@@ -832,6 +832,7 @@ Private endpoints are currently supported for the following Azure services:
 * Azure AI Search
 * Azure AI services
 * Azure API Management
+    * Supporting only Classic tier without VNET injection and Standard V2 tier with virtual network integration. For more on API Management virtual networks, see [Virtual Network Concepts](https://learn.microsoft.com/azure/api-management/virtual-network-concepts)    
 * Azure Container Registry
 * Azure Cosmos DB (all sub resource types)
 * Azure Data Factory

articles/ai-foundry/how-to/develop/sdk-overview.md

@@ -40,7 +40,6 @@ The Azure AI Foundry SDK is a set of client libraries and services designed to w
     az login
     ```
 
-[!INCLUDE [feature-preview](../../includes/feature-preview.md)]
 
 ## Unified Projects client library
 
@@ -69,6 +68,7 @@ The Azure AI Foundry Projects client library is a unified library that enables y
 
 ::: zone pivot="programming-language-java"
 
+[!INCLUDE [feature-preview](../../includes/feature-preview.md)]
 
 * Add these packages to your installation (preview):
     * `com.azure.ai.projects`
@@ -95,6 +95,8 @@ The Azure AI Foundry Projects client library is a unified library that enables y
 
 ::: zone pivot="programming-language-javascript"
 
+[!INCLUDE [feature-preview](../../includes/feature-preview.md)]
+
 * Install dependencies (preview):
 
     ```bash

articles/ai-foundry/media/how-to/projects/fdp-project-overview.png

@@ -595,12 +595,25 @@ items:
     - name: Plan and manage costs for AI Foundry resources
       href: how-to/costs-plan-manage.md
       displayName: pricing, budget, estimate
-    - name: Manage quotas and limits for Foundry Models
-      href: ../ai-foundry/model-inference/quotas-limits.md?context=/azure/ai-foundry/context/context
     - name: Manage quotas
       href: how-to/quota.md
     - name: Increase rate limit
       href: how-to/autoscale.md
+  - name: Cost management for Foundry Models
+    items:
+    - name: Manage quotas and limits for Foundry Models
+      href: ../ai-foundry/model-inference/quotas-limits.md?context=/azure/ai-foundry/context/context
+    - name: What is the Provisioned Throughput offering (PTU)?
+      href: ../ai-services/openai/concepts/provisioned-throughput.md?context=/azure/ai-foundry/context/context
+      displayName: PTU, provisioned, provisioned throughput units
+    - name: Understanding and calculating PTU costs 
+      href: ../ai-services/openai/how-to/provisioned-throughput-onboarding.md?context=/azure/ai-foundry/context/context
+      displayName: PTU, provisioned, provisioned throughput units
+    - name: Get started with Provisioned Deployments
+      href: ../ai-services/openai/how-to/provisioned-get-started.md?context=/azure/ai-foundry/context/context
+      displayName: PTU, provisioned, provisioned throughput units
+    - name: Provisioned spillover
+      href: ../ai-services/openai/how-to/spillover-traffic-management.md?context=/azure/ai-foundry/context/context
 - name: Security & Governance
   items:
   - name: Identity & access management

articles/ai-foundry/toc.yml

@@ -7,7 +7,7 @@ author: aahill
 ms.author: aahi
 ms.service: azure-ai-agent-service
 ms.topic: conceptual
-ms.date: 05/05/2025
+ms.date: 06/03/2025
 ms.custom: azure-ai-agents
 ---
 
@@ -27,7 +27,8 @@ All deployments can perform the exact same inference operations, however the bil
 Azure AI Foundry Agent Service supports the following Azure OpenAI models in the listed regions.
 
 > [!NOTE]
-> The following table is for standard deployment availability. For information on Provisioned Throughput Unit (PTU) availability, see [provisioned throughput](../../openai/concepts/provisioned-throughput.md) in the Azure OpenAI documentation. `GlobalStandard` customers also have access to [global standard models](../../openai/concepts/models.md#global-standard-model-availability). 
+> * The following table is for standard deployment availability. For information on Provisioned Throughput Unit (PTU) availability, see [provisioned throughput](../../openai/concepts/provisioned-throughput.md) in the Azure OpenAI documentation. `GlobalStandard` customers also have access to [global standard models](../../openai/concepts/models.md#global-standard-model-availability). 
+> * [Hub based projects](../../../ai-foundry/what-is-azure-ai-foundry.md#project-types) are limited to the following models: gpt-4o, gpt-4o-mini, gpt-4, gpt-35-turbo
 
 | REGION           | o1 | o3-mini | gpt-4.1, 2025-04-14 | gpt-4.1-mini, 2025-04-14 | gpt-4.1-nano, 2025-04-14 | gpt-4o, 2024-05-13 | gpt-4o, 2024-08-06 | gpt-4o, 2024-11-20 | gpt-4o-mini, 2024-07-18 | gpt-4, 0613 | gpt-4, turbo-2024-04-09 | gpt-4-32k, 0613 | gpt-35-turbo, 1106 | gpt-35-turbo, 0125 |
 |------------------|----|---------|---------------------|--------------------------|--------------------------|--------------------|--------------------|--------------------|-------------------------|-------------|-------------------------|-----------------|--------------------|--------------------|

articles/ai-services/agents/concepts/model-region-support.md

@@ -6,7 +6,7 @@ services: cognitive-services
 manager: nitinme
 ms.service: azure
 ms.topic: how-to
-ms.date: 05/02/2025
+ms.date: 06/04/2025
 author: aahill
 ms.author: aahi
 recommendations: false
@@ -71,8 +71,14 @@ Checks the contract against internal standards or uploaded guidelines to identif
 
     "Review this document against company compliance guidelines and flag any deviations from the approved template."
 
+## Limitations
+
+* Connected agents cannot call local functions using the function calling tool. We recommend using the [OpenAPI tool](./tools/openapi-spec.md) or [Azure Functions](./tools/azure-functions.md) instead.
+* It is currently not possible to guarantee citations will be passed from connected agents. You can try using prompt engineering combined with different models to try and improve the possibility that citations will be outputted by the main agent, but results are subject to variability. 
+
 :::zone pivot="portal"
 
+
 ## Creating a multi-agent setup
 
 1. Navigate to the **Agents** page in the portal

articles/ai-services/agents/how-to/connected-agents.md

@@ -37,6 +37,13 @@ Grounding with Bing returns relevant search results to the customer's model depl
 
 The authorization will happen between Grounding with Bing Search service and Azure AI Foundry Agent Service. Any Bing search query that is generated and sent to Bing for the purposes of grounding is transferred, along with the resource key, outside of the Azure compliance boundary to the Grounding with Bing Search service. Grounding with Bing Search is subject to Bing's terms and do not have the same compliance standards and certifications as the Azure AI Foundry Agent Service, as described in the [Grounding with Bing Search Terms of Use](https://www.microsoft.com/bing/apis/grounding-legal). It is your responsibility to assess whether the use of Grounding with Bing Search in your agent meets your needs and requirements.
 
+## Supported capabilities and known issues
+- Grounding with Bing Search tool is designed to retrieve real-time information from web, NOT specific web domains.
+- NOT Recommended to **summarize** an entire web page.
+- Within one run, the AI model will evaluate the tool outputs and may decide to invoke the tool again for more information and context. AI model may also decide which piece(s) of tool outputs are used to generate the response.
+- Azure AI Agent service will return **AI model generated response** as output so end-to-end latency will be impacted pre-/post-processing of LLMs.
+- Grounding with Bing Search tool does NOT return the tool output to developers and end users.
+
 ## Usage support
 
 |Azure AI foundry support  | Python SDK |	C# SDK | JavaScript SDK | REST API |Basic agent setup | Standard agent setup |

articles/ai-services/agents/how-to/tools/bing-grounding.md

@@ -54,6 +54,7 @@ For customers without an existing virtual network, the Standard Setup with Priva
     * `Microsoft.Search`
     * `Microsoft.Network`
     * `Microsoft.App`
+    * `Microsoft.ContainerService`
     * To use Bing Search tool: `Microsoft.Bing`
 
     ```console
@@ -104,6 +105,36 @@ For customers without an existing virtual network, the Standard Setup with Priva
         ```console
         az deployment group create --resource-group {my_resource_group} --template-file main-create.bicep
         ```
+
+1. Run the CheckCapabilityHostReadiness.ps1 and edit the command to add your subscription ID, resource group name, and your newly deployed AI Services account resource name.
+   
+   ```
+   .\CheckCapabilityHostReadiness.ps1 -subscriptionId "<your-sub-id>" -resourcegroup "<new-rg-name>" -accountname "<your-aiservices-name>"
+   ```
+   
+   If you don't want to run the PowerShell script, you can run a bash script instead, from the file CheckCapabilityHostReadiness.sh. Run the following two commands:
+   
+      ```
+      chmod +x CheckCapabilityHostReadiness.sh
+      ./CheckCapabilityHostReadiness.sh "<your-sub-id>" "<new-rg-name>" "<your-aiservices-name>"
+      ```
+      
+1. Deploy the main-project-caphost-create.bicep
+   
+   ```
+   az deployment group create --resource-group <new-rg-name> --template-file main-project-caphost-create.bicep
+   ```
+   
+   After running this script, you're required to input the following values:
+   
+   ```
+   Please provide string value for 'accountName' (? for help): <your-account-name>
+   Please provide string value for 'projectName' (? for help): <your-project-name>
+   Please provide string value for 'aiSearchName' (? for help): <your-search-name>
+   Please provide string value for 'azureStorageName' (? for help): <your-storage-name>
+   Please provide string value for 'cosmosDBName' (? for help): <your-cosmosdb-name>
+   ```
+
 For more details, see the [README](https://github.com/azure-ai-foundry/foundry-samples/tree/main/samples/microsoft/infrastructure-setup/15-private-network-standard-agent-setup).
 
 ## Deep Dive Standard Setup with Private Networking Template