You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/ai-services/openai/concepts/use-your-data.md
+6-6Lines changed: 6 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -43,7 +43,7 @@ To get started, [connect your data source](../use-your-data-quickstart.md) using
43
43
44
44
## Azure Role-based access controls (Azure RBAC) for adding data sources
45
45
46
-
To use Azure OpenAI On Your Data fully, you need to set one or more Azure RBAC roles. See [Use Azure OpenAI On Your Data securely](../how-to/use-your-data-securely.md#role-assignments) for more information.
46
+
To use Azure OpenAI On Your Data fully, you need to set one or more Azure RBAC roles. See [Azure OpenAI On Your Data configuration](../how-to/on-your-data-configuration.md#role-assignments) for more information.
47
47
48
48
## Data formats and file types
49
49
@@ -131,7 +131,7 @@ Azure OpenAI On Your Data has intelligent search enabled for your data. Semantic
131
131
> [!NOTE]
132
132
> Document-level access control is supported when you select Azure AI Search as your data source.
133
133
134
-
Azure OpenAI On Your Data lets you restrict the documents that can be used in responses for different users with Azure AI Search [security filters](/azure/search/search-security-trimming-for-azure-search-with-aad). When you enable document level access, the search results returned from Azure AI Search and used to generate a response are trimmed based on user Microsoft Entra group membership. You can only enable document-level access on existing Azure AI Search indexes See [Use Azure OpenAI On Your Data securely](../how-to/use-your-data-securely.md#document-level-access-control) for more information.
134
+
Azure OpenAI On Your Data lets you restrict the documents that can be used in responses for different users with Azure AI Search [security filters](/azure/search/search-security-trimming-for-azure-search-with-aad). When you enable document level access, the search results returned from Azure AI Search and used to generate a response are trimmed based on user Microsoft Entra group membership. You can only enable document-level access on existing Azure AI Search indexes. See [Azure OpenAI On Your Data network and access configuration](../how-to/on-your-data-configuration.md#document-level-access-control) for more information.
135
135
136
136
137
137
### Index field mapping
@@ -387,7 +387,7 @@ A Teams app lets you bring conversational experience to your users in Teams to i
387
387
- Sign in to your [Microsoft 365 developer account](/microsoftteams/platform/concepts/build-and-test/prepare-your-o365-tenant) (using this link to get a test account: [Developer program](https://developer.microsoft.com/microsoft-365/dev-program)).
388
388
- Enable **custom Teams apps** and turn on **custom app uploading** in your account (instructions [here](/microsoftteams/platform/concepts/build-and-test/prepare-your-o365-tenant#enable-custom-teams-apps-and-turn-on-custom-app-uploading))
389
389
-[Azure command-line interface (CLI)](/cli/azure/install-azure-cli) installed. This is a cross-platform command-line tool to connect to Azure and execute administrative commands on Azure resources. For more information on setting up environment variables, see the [Azure SDK documentation](https://github.com/Azure/azure-sdk-for-go/wiki/Set-up-Your-Environment-for-Authentication).
390
-
- Your Azure account has been assigned **Cognitive Services OpenAI user** or **Cognitive Services OpenAI Contributor** role of the Azure OpenAI resource you're using, allowing your account to make Azure OpenAI API calls. For more information, see [Using your data with Azure OpenAI securely](/azure/ai-services/openai/how-to/use-your-data-securely#using-the-api) and [Add role assignment to an Azure OpenAI resource](/azure/ai-services/openai/how-to/role-based-access-control#add-role-assignment-to-an-azure-openai-resource) for instructions on setting this role in the Azure portal.
390
+
- Your Azure account has been assigned **Cognitive Services OpenAI user** or **Cognitive Services OpenAI Contributor** role of the Azure OpenAI resource you're using, allowing your account to make Azure OpenAI API calls. For more information, see [Azure OpenAI On Your data configuration](../how-to/on-your-data-configuration.md#using-the-api) and [Add role assignment to an Azure OpenAI resource](/azure/ai-services/openai/how-to/role-based-access-control#add-role-assignment-to-an-azure-openai-resource) for instructions on setting this role in the Azure portal.
391
391
392
392
393
393
You can deploy to a standalone Teams app directly from Azure OpenAI Studio. Follow the steps below:
@@ -433,9 +433,9 @@ Deploying to a standalone web app lets you and your users to interact with chat
433
433
434
434
---
435
435
436
-
## Use Azure OpenAI On Your Data securely
436
+
## Configure access and networking for Azure OpenAI On Your Data
437
437
438
-
You can use Azure OpenAI On Your Data securely by protecting data and resources with Microsoft Entra ID role-based access control, virtual networks, and private endpoints. You can also restrict the documents that can be used in responses for different users with Azure AI Search security filters. See [Securely use Azure OpenAI On Your Data](../how-to/use-your-data-securely.md).
438
+
You can use Azure OpenAI On Your Data and protect data and resources with Microsoft Entra ID role-based access control, virtual networks, and private endpoints. You can also restrict the documents that can be used in responses for different users with Azure AI Search security filters. See [Azure OpenAI On Your Data access and network configuration](../how-to/on-your-data-configuration.md).
439
439
440
440
## Best practices
441
441
@@ -743,6 +743,6 @@ If your Azure OpenAI resource is in another region, you won't be able to use Azu
743
743
## Next steps
744
744
*[Get started using your data with Azure OpenAI](../use-your-data-quickstart.md)
745
745
746
-
*[Securely use Azure OpenAI On Your Data](../how-to/use-your-data-securely.md)
746
+
*[Azure OpenAI On Your Data network and access configuration](../how-to/on-your-data-configuration.md)
747
747
748
748
*[Introduction to prompt engineering](./prompt-engineering.md)
Copy file name to clipboardExpand all lines: articles/ai-services/openai/how-to/on-your-data-configuration.md
+6-8Lines changed: 6 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,27 +1,25 @@
1
1
---
2
-
title: 'Using your data with Azure OpenAI securely'
2
+
title: 'Network and access configuration for Azure OpenAI On Your Data'
3
3
titleSuffix: Azure OpenAI
4
-
description: Use this article to learn about securely using your data for text generation in Azure OpenAI.
4
+
description: Use this article to learn about configuring Azure OpenAI when using your data for text generation.
5
5
#services: cognitive-services
6
6
manager: nitinme
7
7
ms.service: azure-ai-openai
8
8
ms.topic: how-to
9
9
author: aahill
10
10
ms.author: aahi
11
-
ms.date: 09/24/2024
11
+
ms.date: 12/03/2024
12
12
recommendations: false
13
13
---
14
14
15
-
# Securely use Azure OpenAI On Your Data
15
+
# Network and access configuration for Azure OpenAI On Your Data
16
16
17
17
> [!NOTE]
18
18
> As of June 2024, the application form for the Microsoft managed private endpoint to Azure AI Search is no longer needed.
19
19
>
20
20
> The managed private endpoint will be deleted from the Microsoft managed virtual network at July 2025. If you have already provisioned a managed private endpoint through the application process before June 2024, enable [Azure AI Search trusted service](#enable-trusted-service-1) as early as possible to avoid service disruption.
21
21
22
-
Use this article to learn how to use Azure OpenAI On Your Data securely by protecting data and resources with Microsoft Entra ID role-based access control, virtual networks, and private endpoints.
23
-
24
-
This article is only applicable when using [Azure OpenAI On Your Data with text](/azure/ai-services/openai/concepts/use-your-data). It does not apply to [Azure OpenAI On Your Data with images](/azure/ai-services/openai/concepts/use-your-image-data).
22
+
Use this article to learn how to configure networking and access when using Azure OpenAI On Your Data with Microsoft Entra ID role-based access control, virtual networks, and private endpoints.
25
23
26
24
## Data ingestion architecture
27
25
@@ -292,7 +290,7 @@ To enable the developers to use these resources to build applications, the admin
292
290
|`Contributor`| Azure AI Search | List API-Keys to list indexes from Azure OpenAI Studio.|
293
291
|`Contributor`| Storage Account | List Account SAS to upload files from Azure OpenAI Studio.|
294
292
|`Contributor`| The resource group or Azure subscription where the developer need to deploy the web app to | Deploy web app to the developer's Azure subscription.|
295
-
|`Role Based Access Control Administrator`| Azure OpenAI | Permission to configure the necessary role assignment on the Azure OpenAI resource. Enables the web app to call Azure Open AI. |
293
+
|`Role Based Access Control Administrator`| Azure OpenAI | Permission to configure the necessary role assignment on the Azure OpenAI resource. Enables the web app to call Azure OpenAI. |
Copy file name to clipboardExpand all lines: articles/ai-services/openai/includes/on-your-data-authentication.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -9,12 +9,12 @@ ms.date: 03/27/2024
9
9
10
10
## Data connection
11
11
12
-
You need to select how you want to authenticate the connection from Azure OpenAI, Azure AI Search, and Azure blob storage. You can choose a *System assigned managed identity* or an *API key*. By selecting *API key* as the authentication type, the system will automatically populate the API key for you to connect with your Azure AI Search, Azure OpenAI, and Azure Blob Storage resources. By selecting *System assigned managed identity*, the authentication will be based on the [role assignment](../how-to/use-your-data-securely.md#role-assignments) you have. *System assigned managed identity* is selected by default for security.
12
+
You need to select how you want to authenticate the connection from Azure OpenAI, Azure AI Search, and Azure blob storage. You can choose a *System assigned managed identity* or an *API key*. By selecting *API key* as the authentication type, the system will automatically populate the API key for you to connect with your Azure AI Search, Azure OpenAI, and Azure Blob Storage resources. By selecting *System assigned managed identity*, the authentication will be based on the [role assignment](../how-to/on-your-data-configuration.md#role-assignments) you have. *System assigned managed identity* is selected by default for security.
13
13
14
14
15
15
:::image type="content" source="../media/use-your-data/data-connection-authentication.png" alt-text="A screenshot showing the managed identity option in Azure OpenAI Studio." lightbox="../media/use-your-data/data-connection-authentication.png":::
16
16
17
-
Once you select the **next** button, it will automatically validate your setup to use the selected authentication method. If you encounter an error, see the [role assignments article](../how-to/use-your-data-securely.md#role-assignments) to update your setup.
17
+
Once you select the **next** button, it will automatically validate your setup to use the selected authentication method. If you encounter an error, see the [role assignments article](../how-to/on-your-data-configuration.md#role-assignments) to update your setup.
18
18
19
19
Once you have fixed the setup, select **next** again to validate and proceed. API users can also [configure authentication](../references/azure-search.md#api-key-authentication-options) with assigned managed identity and API keys.
Copy file name to clipboardExpand all lines: articles/ai-services/openai/whats-new.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -555,7 +555,7 @@ You can now use Azure OpenAI On Your Data in the following Azure region:
555
555
### Azure OpenAI On Your Data
556
556
557
557
- Full VPN and private endpoint support for Azure OpenAI On Your Data, including security support for: storage accounts, Azure OpenAI resources, and Azure AI Search service resources.
558
-
- New article for using [Azure OpenAI On Your Data securely](./how-to/use-your-data-securely.md) by protecting data with virtual networks and private endpoints.
558
+
- New article for using [Azure OpenAI On Your Data configuration](./how-to/on-your-data-configuration.md) by protecting data with virtual networks and private endpoints.
0 commit comments