You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/ai-services/agents/concepts/standard-agent-setup.md
+2-13Lines changed: 2 additions & 13 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -32,23 +32,12 @@ By bundling these BYO features (file storage, search, and thread storage), the s
32
32
Your existing Azure Cosmos DB for NoSQL Account used in standard setup must have a total throughput limit of at least **3000 RU/s**. Both **Provisioned Throughput** and **Serverless** modes are supported.
33
33
34
34
When you use standard setup, **three containers** will be provisioned in your existing Cosmos DB account, and **each container requires 1000 RU/s**.
35
-
36
35
* thread-message-store: End-user conversations
37
36
* system-thread-message-store: Internal system messages
38
-
* agent-entity-store: Model inputs and outputs
37
+
* agent-entity-store: Agent metadata including their instructions, tools, name, etc.
39
38
40
39
## Project-Level Data Isolation
41
-
42
-
Azure AI Foundry enforces project-level data isolation by default. When you configure your own resources in the project capability host:
43
-
***Azure Storage**: Two Blob containers are automatically provisioned:
44
-
* One for uploaded files
45
-
* One for intermediate system data (for example, chunks, embeddings)
46
-
***Azure Cosmos DB**: Three containers are provisioned under a dedicated enterprise_memory database:
47
-
* thread-message-store: End-user conversations
48
-
* system-thread-message-store: Internal system messages
49
-
* agent-entity-store: Model inputs and outputs
50
-
51
-
This default behavior was chosen to reduce configuration complexity while still enforcing strict data boundaries—ensuring each project has a clean, isolated storage footprint without requiring manual setup.
40
+
Standard setup enforces project-level data isolation by default. Two blob storage containers will automatically be provisioned in your storage account, one for files and one for intermediate system data (chunks, embeddings) and three containers will be provisioned in your Cosmos DB, one for user systems, one for system messages, and one for user inputs related to created agents such as their instructions, tools, name, etc. This default behavior was chosen to reduce setup complexity while still enforcing strict data boundaries between projects.
52
41
53
42
## Capability hosts
54
43
**Capability hosts** are sub-resources on both the Account and Project, enabling interaction with the Azure AI Foundry Agent Service.
| Create an account and project | Azure AI Account Owner |
28
-
|**Standard Setup Only:** Assign RBAC for required resources (Cosmos DB, Search, Storage, etc.) | Role Based Access Administrator |
28
+
|**Standard Setup Only:** Assign RBAC for required resources (Cosmos DB, Search, Storage, etc.) | Role Based Access Control Administrator |
29
29
| Create and edit agents | Azure AI User |
30
30
31
31
## Set up your agent environment
@@ -37,7 +37,7 @@ Agents are scoped at the project level, which ensures data isolation—agents wi
37
37
* An Azure subscription - [Create one for free](https://azure.microsoft.com/free/cognitive-services).
38
38
* Ensure that the individual creating the account and project has the **Azure AI Account Owner** role at the subscription scope
39
39
* If configuring **Standard Setup**, the same individual must also have permissions to assign roles to required resources (Cosmos DB, Search, Storage).
40
-
* The built-in role needed is **Role Based Access Administrator**.
40
+
* The built-in role needed is **Role Based Access Control Administrator**.
41
41
* Alternatively, having the **Owner** role at the subscription level also satisfies this requirement.
42
42
* The key permission needed is: `Microsoft.Authorization/roleAssignments/write`
0 commit comments