|
| 1 | +--- |
| 2 | +title: Create and Configure your Storage Account for Evaluations |
| 3 | +titleSuffix: Azure AI Foundry |
| 4 | +description: Learn how to create and configure your storage account for Azure AI Foundry evaluations. |
| 5 | +manager: scottpolly |
| 6 | +ms.service: azure-ai-foundry |
| 7 | +ms.topic: how-to |
| 8 | +ms.date: 06/30/2025 |
| 9 | +ms.reviewer: gregharen |
| 10 | +ms.author: lagayhar |
| 11 | +author: lgayhardt |
| 12 | +--- |
| 13 | + |
| 14 | +# How to create and configure your storage account for use in Azure AI Foundry Projects |
| 15 | + |
| 16 | +> [!IMPORTANT] |
| 17 | +> This guidance only applies to the new Foundry resource based projects, not hub based projects. These steps aren't required for hub based projects. |
| 18 | +
|
| 19 | +When running evaluations with user provided datasets, users must connect a Storage Account to their Azure AI Foundry Resource. This is the storage account that is used to store these datasets. However, providing this connection isn't enough, the project must also be given contributor access to the blob storage to allow read and write access to the storage account. These instructions walk you through how to create the storage account, connect it to your project, and give resource permission. |
| 20 | + |
| 21 | +## Prerequisites |
| 22 | + |
| 23 | +[!INCLUDE [uses-fdp-only](../includes/uses-fdp-only.md)] |
| 24 | + |
| 25 | +## Create your blob storage account |
| 26 | + |
| 27 | +If you have already created your blob storage account, you can skip this section. |
| 28 | + |
| 29 | +Azure AI Foundry evaluations use the user's blob storage account to store datasets for use in evaluations. To create the storage account, follow the below steps: |
| 30 | + |
| 31 | +1. Go to your AI Foundry Project and find your resource group. To find your resource group, select the project name in the top right corner and select your resource group. This takes you to the resource group in Azure portal. |
| 32 | +1. Select **Create** on the Resource Group page. |
| 33 | +1. Search "Storage Account" and select the Storage Account option that is published by Microsoft. |
| 34 | + |
| 35 | + :::image type="content" source="../media/evaluations/storage/storage-account.png" alt-text="A screenshot showing the Microsoft storage account option." lightbox="../media/evaluations/storage/storage-account.png"::: |
| 36 | + |
| 37 | +1. Create your storage account. |
| 38 | + 1. *Storage account name*: Give your storage account a meaningful name. |
| 39 | + 1. *Region*: Recommendation: Create the storage account in the same region you created your project. To find this, go back to Azure AI Foundry, select the project name in the top right corner of the screen (which is the same option you selected earlier to find the link to your resource group), and review the Location of the resource group. Note: it will not default to the same region. |
| 40 | + 1. *Primary service*: Azure Blob Storage or Azure Data Lake Storage Gen 2. |
| 41 | + 1. *Performance*: Standard. |
| 42 | + 1. *Redundancy*: Geo-redundant storage (GRS). |
| 43 | + 1. Select **Review+Create**. |
| 44 | + 1. Select **Create**. |
| 45 | +1. Your storage account is now created. Allow time for the resource to be fully provisioned, normally 1-2 minutes. |
| 46 | + |
| 47 | +## Connect your blob storage account in Azure AI Foundry |
| 48 | + |
| 49 | +Now that the storage account has been created, it's time to connect the blob storage account to the Azure AI Foundry resource. If you have already completed this step, you can skip to the next section. |
| 50 | + |
| 51 | +1. Navigate to your project at ai.azure.com. Ensure you are in the project you're trying to run evaluations for. |
| 52 | +1. In the lower left corner at the bottom of the menu, select **Management Center**. |
| 53 | +1. Select **Connected Resources** under "Resource (your resource name here)", NOT Project. |
| 54 | +1. Select **New connection**. |
| 55 | +1. Select **Storage account**. |
| 56 | + :::image type="content" source="../media/evaluations/storage/add-storage-account.png" alt-text="A screenshot showing the adding a storage account as a new connection to your resource." lightbox="../media/evaluations/storage/add-storage-account.png"::: |
| 57 | +1. Search for your storage account name that you created. |
| 58 | +1. Authentication method: Recommended: Microsoft Entra ID. |
| 59 | +1. Select **Add Connection**. |
| 60 | +1. The connection is now created. Continue to the next section to provision permissions for Azure AI Foundry resource to the blob storage account. |
| 61 | + |
| 62 | +## Give Azure AI Foundry resource permission to read/write to the storage account |
| 63 | + |
| 64 | +The final step to setting up this storage account to store your datasets for evaluation runs in Azure AI Foundry, you must provide the project permissions to access the storage account. To do so, follow the below steps: |
| 65 | + |
| 66 | +1. Navigate to your project in Azure AI Foundry. |
| 67 | +1. In the top left corner, select your project name dropdown. |
| 68 | +1. Select the Resource Group link, which will take you to Azure portal for the resource group. |
| 69 | +1. Select the storage account you created under the *Resources* table. |
| 70 | +1. On the right hand side, select **Access Control (IAM)**. |
| 71 | +1. Select +Add -> Add role assignment. |
| 72 | + > [!NOTE] |
| 73 | + > If this is disabled, go to **Role assignments** and under *All*, ask an owner to take the next steps. |
| 74 | +
|
| 75 | + :::image type="content" source="../media/evaluations/storage/access-control.png" alt-text="A screenshot of access control in the storage account settings highlighting add role assignment. " lightbox="../media/evaluations/storage/access-control.png"::: |
| 76 | +1. In the *Job function roles* table, search for "Storage Blob Data Contributor" and select that option. Then select **Next** at the bottom of the screen. |
| 77 | +1. In the "Assign access to" option, select **Managed identity**. |
| 78 | +1. Select **+ Select members**. |
| 79 | + 1. *Subscription*: Your subscription |
| 80 | + 1. *Managed identity*: All system-assigned managed identities. |
| 81 | + 1. Select: Search for your project name. Select your project, not the resource. It should be formatted [ResourceName]/[ProjectName]. Don't select the resource name, which doesn't have the "/[ProjectName] after it. |
| 82 | + 1. Select **Select** button at the bottom. |
| 83 | +1. Select **Review + assign** twice. |
| 84 | + |
| 85 | +You have now provided your project with write access to your blob storage account. After a few minutes, you'll be able to add data during an evaluation in AI Foundry. |
| 86 | + |
| 87 | +## Related content |
| 88 | + |
| 89 | +- [Run evaluations in the cloud](./develop/cloud-evaluation.md) |
0 commit comments