You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/ai-foundry/concepts/rbac-azure-ai-foundry.md
+4-8Lines changed: 4 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -270,7 +270,7 @@ Here's a table of the built-in roles and their permissions for the hub:
270
270
| --- | --- |
271
271
| Owner | Full access to the hub, including the ability to manage and create new hubs and assign permissions. This role is automatically assigned to the hub creator|
272
272
| Contributor | User has full access to the hub, including the ability to create new hubs, but isn't able to manage hub permissions on the existing resource. |
273
-
| Azure AI Administrator (preview) | This role is automatically assigned to the system-assigned managed identity for the hub. The Azure AI Administrator role has the minimum permissions needed for the managed identity to perform its tasks. For more information, see [Azure AI Administrator role (preview)](#azure-ai-administrator-role-preview). |
273
+
| Azure AI Administrator | This role is automatically assigned to the system-assigned managed identity for the hub. The Azure AI Administrator role has the minimum permissions needed for the managed identity to perform its tasks. For more information, see [Azure AI Administrator role](#azure-ai-administrator-role). |
274
274
| Azure AI Developer | Perform all actions except create new hubs and manage the hub permissions. For example, users can create projects, compute, and connections. Users can assign permissions within their project. Users can interact with existing Azure AI resources such as Azure OpenAI, Azure AI Search, and Azure AI services. |
275
275
| Azure AI Inference Deployment Operator | Perform all actions required to create a resource deployment within a resource group. |
276
276
| Reader | Read only access to the hub. This role is automatically assigned to all project members within the hub. |
@@ -279,14 +279,10 @@ The key difference between Contributor and Azure AI Developer is the ability to
279
279
280
280
Only the Owner and Contributor roles allow you to make a hub. At this time, custom roles can't grant you permission to make hubs.
281
281
282
-
### Azure AI Administrator role (preview)
282
+
### Azure AI Administrator role
283
283
284
284
Before 11/19/2024, the system-assigned managed identity created for the hub was automatically assigned the __Contributor__ role for the resource group that contains the hub and projects. Hubs created after this date have the system-assigned managed identity assigned to the __Azure AI Administrator__ role. This role is more narrowly scoped to the minimum permissions needed for the managed identity to perform its tasks.
285
285
286
-
The __Azure AI Administrator__ role is currently in public preview.
The __Azure AI Administrator__ role has the following permissions:
291
287
292
288
```json
@@ -419,7 +415,7 @@ Here's a table of the built-in roles and their permissions for the project:
419
415
| --- | --- |
420
416
| Owner | Full access to the project, including the ability to assign permissions to project users. |
421
417
| Contributor | User has full access to the project but can't assign permissions to project users. |
422
-
| Azure AI Administrator (preview) | This role is automatically assigned to the system-assigned managed identity for the hub. The Azure AI Administrator role has the minimum permissions needed for the managed identity to perform its tasks. For more information, see [Azure AI Administrator role (preview)](#azure-ai-administrator-role-preview). |
418
+
| Azure AI Administrator | This role is automatically assigned to the system-assigned managed identity for the hub. The Azure AI Administrator role has the minimum permissions needed for the managed identity to perform its tasks. For more information, see [Azure AI Administrator role](#azure-ai-administrator-role). |
423
419
| Azure AI Developer | User can perform most actions, including create deployments, but can't assign permissions to project users. |
424
420
| Azure AI Inference Deployment Operator | Perform all actions required to create a resource deployment within a resource group. |
425
421
| Reader | Read only access to the project. |
@@ -767,4 +763,4 @@ If you create a new hub and encounter errors with the new default role assignmen
767
763
- [How to create an Azure AI Foundry project](../how-to/create-projects.md)
768
764
- [How to create a connection in Azure AI Foundry portal](../how-to/connections-add.md)
0 commit comments