Skip to content

Commit 58f0175

Browse files
authored
Update RBAC role for Document Intelligence
Appropriate role should be Storage Blob Data Contributor but not Storage Blob Data Reader as the image secure-config-di.png says so.
1 parent d112830 commit 58f0175

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

articles/ai-services/document-intelligence/managed-identities-secured-access.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -114,7 +114,7 @@ To ensure that the Document Intelligence resource can access the training datase
114114

115115
:::image type="content" source="media/managed-identities/v2-stg-role-assign-role.png" alt-text="Screenshot of add role assignment window.":::
116116

117-
1. On the **Role** tab, search for and select the **Storage Blob Data Reader** permission and select **Next**.
117+
1. On the **Role** tab, search for and select the **Storage Blob Data Contributor** permission and select **Next**.
118118

119119
:::image type="content" source="media/managed-identities/v2-stg-role-assignment.png" alt-text="Screenshot of choose a role tab.":::
120120

@@ -279,7 +279,7 @@ That's it! You can now configure secure access for your Document Intelligence re
279279

280280
:::image type="content" source="media/managed-identities/content-source-error.png" alt-text="Screenshot of content source not accessible error.":::
281281

282-
**Resolution**: Make sure you grant your Document Intelligence managed identity the role of **Storage Blob Data Reader** and enabled **Trusted services** access or **Resource instance** rules on the networking tab.
282+
**Resolution**: Make sure you grant your Document Intelligence managed identity the role of **Storage Blob Data Contributor** and enabled **Trusted services** access or **Resource instance** rules on the networking tab.
283283

284284
* **AccessDenied**:
285285

0 commit comments

Comments
 (0)