You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/ai-services/agents/how-to/use-your-own-vnet.md
+12-10Lines changed: 12 additions & 10 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -14,23 +14,23 @@ ms.custom: azure-ai-agents
14
14
15
15
# QuickStart: Create a new network-secured agent with user-managed identity
16
16
17
-
Azure AI Agent Service offers a standard agent configuration with private networking, allowing you to bring your own private virtual network. This setup creates an isolated network environment that lets you securely access data and perform actions while maintaining full control over your network infrastructure. This guide provides a step-by-step walkthrough of the setup process and outlines all necessary requirements.
17
+
Azure AI Agent Service offers a standard agent configuration with private networking, allowing you to bring your own (BYO) private virtual network. This setup creates an isolated network environment that lets you securely access data and perform actions while maintaining full control over your network infrastructure. This guide provides a step-by-step walkthrough of the setup process and outlines all necessary requirements.
18
18
19
19
> [!NOTE]
20
-
> Standard setup with private networking can only be configured by deploying the Bicep template. Once deployed, agents must be created using the SDK. You cannot use the UI to create agents in a project with private networking enabled.
20
+
> Standard setup with private networking can only be configured by deploying the Bicep template. Once deployed, agents must be created using the SDK. You can't use the UI to create agents in a project with private networking enabled.
21
21
22
-
For more details [BYO Vnet overview](byo-vnet-overview.md).
22
+
For more details, see the[BYO Vnet overview](byo-vnet-overview.md).
23
23
24
24
## Prerequisites
25
25
26
26
1. An Azure subscription - [Create one for free](https://azure.microsoft.com/free/cognitive-services).
27
27
2.[Python 3.8 or later](https://www.python.org/)
28
-
3. Ensure that the individual deploying the template has the the role: **Azure AI Developer** assigned at the resource group level where the template is being deployed. [Learn more](https://learn.microsoft.com/azure/ai-studio/concepts/rbac-ai-studio)
29
-
4. Additionally, to deploy the temaplete you need to have the preset role: **Role Based Access Administrator** at the subscription level. [Learn more](https://learn.microsoft.com/azure/role-based-access-control/built-in-roles/privileged#role-based-access-control-administrator)
28
+
3. Ensure that the individual deploying the template has the role: **Azure AI Developer** assigned at the resource group level where the template is being deployed. [Learn more](https://learn.microsoft.com/azure/ai-studio/concepts/rbac-ai-studio)
29
+
4. Additionally, to deploy the template, you need to have the preset role: **Role Based Access Administrator** at the subscription level. [Learn more](https://learn.microsoft.com/azure/role-based-access-control/built-in-roles/privileged#role-based-access-control-administrator)
30
30
* Note: The **Owner** role at the subscription level satisfies this requirement.
31
31
* Note: The specific admin role that is needed is: **'Microsoft.Authorization/roleAssignments/write'**
32
-
1. Install [the Azure CLI and the machine learning extension](/azure/machine-learning/how-to-configure-cli). If you have the CLI already installed, make sure it's updated to the latest version.
33
-
1. Register providers
32
+
5. Install [the Azure CLI and the machine learning extension](/azure/machine-learning/how-to-configure-cli). If you have the CLI already installed, make sure it's updated to the latest version.
33
+
6. Register providers
34
34
The following providers must be registered:
35
35
36
36
* Microsoft.KeyVault
@@ -56,15 +56,16 @@ For more details [BYO Vnet overview](byo-vnet-overview.md).
56
56
**Network Secured Setup**: Agents use customer-owned, single-tenant search and storage resources. With this setup, you have full control and visibility over these resources, but you incur costs based on your usage.
57
57
58
58
* Resources for the hub, project, storage account, key vault, AI Services, and Azure AI Search are created for you. The AI Services, AI Search, and Azure Blob Storage account are connected to your project/hub, and a gpt-4o-mini model is deployed in the westus2 region.
59
-
* Customer-owned resources are secured with a provisioned managed network and authenticated with a User Managed Identity with the necessary RBAC permissions. Private links and DNS zones are created on behalf of the customer to ensure network connectivity.
59
+
* Customer-owned resources are secured with a provisioned managed network and authenticated with a User Managed Identity with the necessary RBAC (Role-Based Access Control) permissions. Private links and DNS (Domain Name System) zones are created on behalf of the customer to ensure network connectivity.
60
60
61
61
<br/>
62
62
63
63
<details>
64
64
<summary><b> Bicep Technical Details</b>
65
65
</summary>
66
66
67
-
**The Bicep template automates the following configurations and resource provisions:*** Creates a User Assigned Identity. [Learn more](https://learn.microsoft.com/entra/identity/managed-identities-azure-resources/how-manage-user-assigned-managed-identities?pivots=identity-mi-methods-azp#create-a-user-assigned-managed-identity)
67
+
**The Bicep template automates the following configurations and resource provisions:**
68
+
* Creates a User Assigned Identity. [Learn more](https://learn.microsoft.com/entra/identity/managed-identities-azure-resources/how-manage-user-assigned-managed-identities?pivots=identity-mi-methods-azp#create-a-user-assigned-managed-identity)
68
69
* The User Assigned Managed Identity requires the following Role-Based Access Roles:
69
70
* KeyVault Secret Officer
70
71
* KeyVault Contributor
@@ -137,7 +138,7 @@ For more details [BYO Vnet overview](byo-vnet-overview.md).
137
138
138
139
```
139
140
140
-
1. To customize other parameters, including the OpenAI model deployment, download and edit the azuredeploy.parameters.json file, then run:
141
+
1. To customize other parameters, including the OpenAI model deployment, download, and edit the azuredeploy.parameters.json file, then run:
141
142
142
143
```console
143
144
az deployment group create --resource-group {my_resource_group} --template-file main.bicep --parameters @azuredeploy.parameters.json
0 commit comments