Merge pull request #2325 from aahill/agent-rbac

adding RBAC roles

Author: Stacyrch140

articles/ai-services/agents/includes/quickstart-csharp.md

@@ -16,6 +16,8 @@ ms.date: 11/13/2024
 * Make sure you have the **Azure AI Developer** [RBAC role](../../../ai-studio/concepts/rbac-ai-studio.md) assigned at the appropriate level.
 * Install [the Azure CLI and the machine learning extension](/azure/machine-learning/how-to-configure-cli). If you have the CLI already installed, make sure it's updated to the latest version.
 
+[!INCLUDE [rbac-roles](rbac-roles.md)]
+
 [!INCLUDE [bicep-setup](bicep-setup.md)]
 
 ## Configure and run an agent

articles/ai-services/agents/includes/quickstart-python-openai.md

@@ -18,6 +18,8 @@ ms.date: 11/13/2024
 * You need the **Cognitive Services OpenAI User** role assigned to use the Azure AI Services resource.
 * Install [the Azure CLI and the machine learning extension](/azure/machine-learning/how-to-configure-cli). If you have the CLI already installed, make sure it's updated to the latest version.
 
+[!INCLUDE [rbac-roles](rbac-roles.md)]
+
 [!INCLUDE [bicep-setup](bicep-setup.md)]
 
 ## Configure and run an agent

articles/ai-services/agents/includes/quickstart-python.md

@@ -17,6 +17,8 @@ ms.date: 11/13/2024
 * Make sure you have the **Azure AI Developer** [RBAC role](../../../ai-studio/concepts/rbac-ai-studio.md) assigned at the appropriate level.
 * Install [the Azure CLI and the machine learning extension](/azure/machine-learning/how-to-configure-cli). If you have the CLI already installed, make sure it's updated to the latest version.
 
+[!INCLUDE [rbac-roles](rbac-roles.md)]
+
 [!INCLUDE [bicep-setup](bicep-setup.md)]
 
 ## Configure and run an agent

articles/ai-services/agents/includes/rbac-roles.md

@@ -0,0 +1,22 @@
+---
+manager: nitinme
+author: aahill
+ms.author: aahi
+ms.service: azure-ai-agent-service
+ms.topic: include
+ms.date: 11/13/2024
+---
+
+### RBAC roles
+
+Make sure both developers and end users have the following permissions: 
+
+* `Microsoft.MachineLearningServices/workspaces/agents/read`
+* `Microsoft.MachineLearningServices/workspaces/agents/action`
+* `Microsoft.MachineLearningServices/workspaces/agents/delete`
+
+If you want to create custom permissions, make sure they have: 
+
+* `agents/*/read` 
+* `agents/*/action` 
+* `agents/*/delete`