Skip to content

Commit 49959f1

Browse files
authored
Merge pull request #1798 from aahill/security-rename
[Azure AI Svcs] updating article name
2 parents 2285acb + 7fb7ac0 commit 49959f1

File tree

7 files changed

+24
-23
lines changed

7 files changed

+24
-23
lines changed

.openpublishing.redirection.json

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -24,6 +24,11 @@
2424
"source_path_from_root": "/articles/search/search-howto-large-index.md",
2525
"redirect_url": "/azure/search/search-how-to-large-index",
2626
"redirect_document_id": false
27+
},
28+
{
29+
"source_path_from_root": "/articles/ai-services/openai/how-to/use-your-data-securely.md",
30+
"redirect_url": "/azure/ai-services/openai/how-to/on-your-data-configuration",
31+
"redirect_document_id": false
2732
}
2833
]
2934
}

articles/ai-services/openai/concepts/use-your-data.md

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -43,7 +43,7 @@ To get started, [connect your data source](../use-your-data-quickstart.md) using
4343

4444
## Azure Role-based access controls (Azure RBAC) for adding data sources
4545

46-
To use Azure OpenAI On Your Data fully, you need to set one or more Azure RBAC roles. See [Use Azure OpenAI On Your Data securely](../how-to/use-your-data-securely.md#role-assignments) for more information.
46+
To use Azure OpenAI On Your Data fully, you need to set one or more Azure RBAC roles. See [Azure OpenAI On Your Data configuration](../how-to/on-your-data-configuration.md#role-assignments) for more information.
4747

4848
## Data formats and file types
4949

@@ -131,7 +131,7 @@ Azure OpenAI On Your Data has intelligent search enabled for your data. Semantic
131131
> [!NOTE]
132132
> Document-level access control is supported when you select Azure AI Search as your data source.
133133
134-
Azure OpenAI On Your Data lets you restrict the documents that can be used in responses for different users with Azure AI Search [security filters](/azure/search/search-security-trimming-for-azure-search-with-aad). When you enable document level access, the search results returned from Azure AI Search and used to generate a response are trimmed based on user Microsoft Entra group membership. You can only enable document-level access on existing Azure AI Search indexes See [Use Azure OpenAI On Your Data securely](../how-to/use-your-data-securely.md#document-level-access-control) for more information.
134+
Azure OpenAI On Your Data lets you restrict the documents that can be used in responses for different users with Azure AI Search [security filters](/azure/search/search-security-trimming-for-azure-search-with-aad). When you enable document level access, the search results returned from Azure AI Search and used to generate a response are trimmed based on user Microsoft Entra group membership. You can only enable document-level access on existing Azure AI Search indexes. See [Azure OpenAI On Your Data network and access configuration](../how-to/on-your-data-configuration.md#document-level-access-control) for more information.
135135

136136

137137
### Index field mapping
@@ -387,7 +387,7 @@ A Teams app lets you bring conversational experience to your users in Teams to i
387387
- Sign in to your [Microsoft 365 developer account](/microsoftteams/platform/concepts/build-and-test/prepare-your-o365-tenant) (using this link to get a test account: [Developer program](https://developer.microsoft.com/microsoft-365/dev-program)).
388388
- Enable **custom Teams apps** and turn on **custom app uploading** in your account (instructions [here](/microsoftteams/platform/concepts/build-and-test/prepare-your-o365-tenant#enable-custom-teams-apps-and-turn-on-custom-app-uploading))
389389
- [Azure command-line interface (CLI)](/cli/azure/install-azure-cli) installed. This is a cross-platform command-line tool to connect to Azure and execute administrative commands on Azure resources. For more information on setting up environment variables, see the [Azure SDK documentation](https://github.com/Azure/azure-sdk-for-go/wiki/Set-up-Your-Environment-for-Authentication).
390-
- Your Azure account has been assigned **Cognitive Services OpenAI user** or **Cognitive Services OpenAI Contributor** role of the Azure OpenAI resource you're using, allowing your account to make Azure OpenAI API calls. For more information, see [Using your data with Azure OpenAI securely](/azure/ai-services/openai/how-to/use-your-data-securely#using-the-api) and [Add role assignment to an Azure OpenAI resource](/azure/ai-services/openai/how-to/role-based-access-control#add-role-assignment-to-an-azure-openai-resource) for instructions on setting this role in the Azure portal.
390+
- Your Azure account has been assigned **Cognitive Services OpenAI user** or **Cognitive Services OpenAI Contributor** role of the Azure OpenAI resource you're using, allowing your account to make Azure OpenAI API calls. For more information, see [Azure OpenAI On Your data configuration](../how-to/on-your-data-configuration.md#using-the-api) and [Add role assignment to an Azure OpenAI resource](/azure/ai-services/openai/how-to/role-based-access-control#add-role-assignment-to-an-azure-openai-resource) for instructions on setting this role in the Azure portal.
391391

392392

393393
You can deploy to a standalone Teams app directly from Azure OpenAI Studio. Follow the steps below:
@@ -433,9 +433,9 @@ Deploying to a standalone web app lets you and your users to interact with chat
433433

434434
---
435435

436-
## Use Azure OpenAI On Your Data securely
436+
## Configure access and networking for Azure OpenAI On Your Data
437437

438-
You can use Azure OpenAI On Your Data securely by protecting data and resources with Microsoft Entra ID role-based access control, virtual networks, and private endpoints. You can also restrict the documents that can be used in responses for different users with Azure AI Search security filters. See [Securely use Azure OpenAI On Your Data](../how-to/use-your-data-securely.md).
438+
You can use Azure OpenAI On Your Data and protect data and resources with Microsoft Entra ID role-based access control, virtual networks, and private endpoints. You can also restrict the documents that can be used in responses for different users with Azure AI Search security filters. See [Azure OpenAI On Your Data access and network configuration](../how-to/on-your-data-configuration.md).
439439

440440
## Best practices
441441

@@ -743,6 +743,6 @@ If your Azure OpenAI resource is in another region, you won't be able to use Azu
743743
## Next steps
744744
* [Get started using your data with Azure OpenAI](../use-your-data-quickstart.md)
745745

746-
* [Securely use Azure OpenAI On Your Data](../how-to/use-your-data-securely.md)
746+
* [Azure OpenAI On Your Data network and access configuration](../how-to/on-your-data-configuration.md)
747747

748748
* [Introduction to prompt engineering](./prompt-engineering.md)

articles/ai-services/openai/how-to/use-your-data-securely.md renamed to articles/ai-services/openai/how-to/on-your-data-configuration.md

Lines changed: 6 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -1,27 +1,25 @@
11
---
2-
title: 'Using your data with Azure OpenAI securely'
2+
title: 'Network and access configuration for Azure OpenAI On Your Data'
33
titleSuffix: Azure OpenAI
4-
description: Use this article to learn about securely using your data for text generation in Azure OpenAI.
4+
description: Use this article to learn about configuring Azure OpenAI when using your data for text generation.
55
#services: cognitive-services
66
manager: nitinme
77
ms.service: azure-ai-openai
88
ms.topic: how-to
99
author: aahill
1010
ms.author: aahi
11-
ms.date: 09/24/2024
11+
ms.date: 12/03/2024
1212
recommendations: false
1313
---
1414

15-
# Securely use Azure OpenAI On Your Data
15+
# Network and access configuration for Azure OpenAI On Your Data
1616

1717
> [!NOTE]
1818
> As of June 2024, the application form for the Microsoft managed private endpoint to Azure AI Search is no longer needed.
1919
>
2020
> The managed private endpoint will be deleted from the Microsoft managed virtual network at July 2025. If you have already provisioned a managed private endpoint through the application process before June 2024, enable [Azure AI Search trusted service](#enable-trusted-service-1) as early as possible to avoid service disruption.
2121
22-
Use this article to learn how to use Azure OpenAI On Your Data securely by protecting data and resources with Microsoft Entra ID role-based access control, virtual networks, and private endpoints.
23-
24-
This article is only applicable when using [Azure OpenAI On Your Data with text](/azure/ai-services/openai/concepts/use-your-data). It does not apply to [Azure OpenAI On Your Data with images](/azure/ai-services/openai/concepts/use-your-image-data).
22+
Use this article to learn how to configure networking and access when using Azure OpenAI On Your Data with Microsoft Entra ID role-based access control, virtual networks, and private endpoints.
2523

2624
## Data ingestion architecture
2725

@@ -292,7 +290,7 @@ To enable the developers to use these resources to build applications, the admin
292290
| `Contributor` | Azure AI Search | List API-Keys to list indexes from Azure OpenAI Studio.|
293291
| `Contributor` | Storage Account | List Account SAS to upload files from Azure OpenAI Studio.|
294292
| `Contributor` | The resource group or Azure subscription where the developer need to deploy the web app to | Deploy web app to the developer's Azure subscription.|
295-
| `Role Based Access Control Administrator` | Azure OpenAI | Permission to configure the necessary role assignment on the Azure OpenAI resource. Enables the web app to call Azure Open AI. |
293+
| `Role Based Access Control Administrator` | Azure OpenAI | Permission to configure the necessary role assignment on the Azure OpenAI resource. Enables the web app to call Azure OpenAI. |
296294

297295
## Configure gateway and client
298296

articles/ai-services/openai/includes/on-your-data-authentication.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -9,12 +9,12 @@ ms.date: 03/27/2024
99

1010
## Data connection
1111

12-
You need to select how you want to authenticate the connection from Azure OpenAI, Azure AI Search, and Azure blob storage. You can choose a *System assigned managed identity* or an *API key*. By selecting *API key* as the authentication type, the system will automatically populate the API key for you to connect with your Azure AI Search, Azure OpenAI, and Azure Blob Storage resources. By selecting *System assigned managed identity*, the authentication will be based on the [role assignment](../how-to/use-your-data-securely.md#role-assignments) you have. *System assigned managed identity* is selected by default for security.
12+
You need to select how you want to authenticate the connection from Azure OpenAI, Azure AI Search, and Azure blob storage. You can choose a *System assigned managed identity* or an *API key*. By selecting *API key* as the authentication type, the system will automatically populate the API key for you to connect with your Azure AI Search, Azure OpenAI, and Azure Blob Storage resources. By selecting *System assigned managed identity*, the authentication will be based on the [role assignment](../how-to/on-your-data-configuration.md#role-assignments) you have. *System assigned managed identity* is selected by default for security.
1313

1414

1515
:::image type="content" source="../media/use-your-data/data-connection-authentication.png" alt-text="A screenshot showing the managed identity option in Azure OpenAI Studio." lightbox="../media/use-your-data/data-connection-authentication.png":::
1616

17-
Once you select the **next** button, it will automatically validate your setup to use the selected authentication method. If you encounter an error, see the [role assignments article](../how-to/use-your-data-securely.md#role-assignments) to update your setup.
17+
Once you select the **next** button, it will automatically validate your setup to use the selected authentication method. If you encounter an error, see the [role assignments article](../how-to/on-your-data-configuration.md#role-assignments) to update your setup.
1818

1919
Once you have fixed the setup, select **next** again to validate and proceed. API users can also [configure authentication](../references/azure-search.md#api-key-authentication-options) with assigned managed identity and API keys.
2020

articles/ai-services/openai/index.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -102,8 +102,8 @@ landingContent:
102102
url: ./how-to/gpt-with-vision.md
103103
- text: Provisioned Throughput Units (PTU)
104104
url: ./how-to/provisioned-throughput-onboarding.md
105-
- text: Securing Azure OpenAI on your data
106-
url: ./how-to/use-your-data-securely.md
105+
- text: Network and access configuration for Azure OpenAI on your data
106+
url: ./how-to/on-your-data-configuration.md
107107
- text: Resource creation & deployment
108108
url: ./how-to/create-resource.md
109109

articles/ai-services/openai/toc.yml

Lines changed: 2 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -173,8 +173,8 @@ items:
173173
- name: Text data
174174
href: ./concepts/use-your-data.md
175175
displayName: use your data, on your data
176-
- name: Use Azure OpenAI On Your Data securely
177-
href: ./how-to/use-your-data-securely.md
176+
- name: Network and access configuration
177+
href: ./how-to/on-your-data-configuration.md
178178
- name: Deploy and use web apps
179179
href: ./how-to/use-web-app.md
180180
- name: Use the Azure Developer CLI
@@ -199,8 +199,6 @@ items:
199199
href: encrypt-data-at-rest.md
200200
- name: Managed identity
201201
href: ./how-to/managed-identity.md
202-
- name: Use Azure OpenAI on your data securely
203-
href: ./how-to/use-your-data-securely.md
204202
- name: Service management
205203
items:
206204
- name: Resource creation & model deployment

articles/ai-services/openai/whats-new.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -555,7 +555,7 @@ You can now use Azure OpenAI On Your Data in the following Azure region:
555555
### Azure OpenAI On Your Data
556556

557557
- Full VPN and private endpoint support for Azure OpenAI On Your Data, including security support for: storage accounts, Azure OpenAI resources, and Azure AI Search service resources.
558-
- New article for using [Azure OpenAI On Your Data securely](./how-to/use-your-data-securely.md) by protecting data with virtual networks and private endpoints.
558+
- New article for using [Azure OpenAI On Your Data configuration](./how-to/on-your-data-configuration.md) by protecting data with virtual networks and private endpoints.
559559

560560
### GPT-4 Turbo with Vision now available
561561

0 commit comments

Comments
 (0)