You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/ai-services/computer-vision/how-to/identity-access-token.md
+6-6Lines changed: 6 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -9,25 +9,25 @@ manager: nitinme
9
9
ms.service: azure-ai-vision
10
10
ms.subservice: azure-ai-face
11
11
ms.topic: how-to
12
-
ms.date: 05/11/2023
12
+
ms.date: 03/07/2024
13
13
ms.author: pafarley
14
14
---
15
15
16
16
# Use limited access tokens for Face
17
17
18
-
Independent software vendors (ISVs) can manage the Face API usage of their clients by issuing access tokens that grant access to Face features which are normally gated. This allows client companies to use the Face API without having to go through the formal approval process.
18
+
Independent software vendors (ISVs) can manage the Face API usage of their clients by issuing access tokens that grant access to Face features which are normally gated. This allows their client companies to use the Face API without having to go through the formal approval process.
19
19
20
20
This guide shows you how to generate the access tokens, if you're an approved ISV, and how to use the tokens if you're a client.
21
21
22
-
The LimitedAccessToken feature is a part of the existing [Azure AI services token service](https://westus.dev.cognitive.microsoft.com/docs/services/57346a70b4769d2694911369/operations/issueScopedToken). We have added a new operation for the purpose of bypassing the Limited Access gate for approved scenarios. Only ISVs that pass the gating requirements will be given access to this feature.
22
+
The limited access token feature is a part of the existing [Azure AI services token service](https://westus.dev.cognitive.microsoft.com/docs/services/57346a70b4769d2694911369/operations/issueScopedToken). We have added a new operation for the purpose of bypassing the Limited Access gate for approved scenarios. Only ISVs that pass the gating requirements will be given access to this feature.
23
23
24
24
## Example use case
25
25
26
-
A company sells software that uses the Azure AI Face service to operate door access security systems. Their clients, individual manufacturers of door devices, subscribe to the software and run it on their devices. These client companies want to make Face API calls from their devices to perform Limited Access operations like face identification. By relying on access tokens from the ISV, they can bypass the formal approval process for face identification. The ISV, which has already been approved, can grant the client just-in-time access tokens.
26
+
An example company sells software that uses the Azure AI Face service to operate door access security systems. Their clients, individual manufacturers of door devices, subscribe to the software and run it on their devices. These client companies want to make Face API calls from their devices to perform Limited Access operations like face identification. By relying on access tokens from the ISV, they can bypass the formal approval process for face identification. The ISV, which has already been approved, can grant the client just-in-time access tokens.
27
27
28
28
## Expectation of responsibility
29
29
30
-
The issuing ISV is responsible for ensuring that the tokens are used only for the approved purpose.
30
+
The token-issuing ISV is responsible for ensuring that the tokens are used only for the approved purpose.
31
31
32
32
If the ISV learns that a client is using the LimitedAccessToken for non-approved purposes, the ISV should stop generating tokens for that customer. Microsoft can track the issuance and usage of LimitedAccessTokens, and we reserve the right to revoke an ISV's access to the **issueLimitedAccessToken** API if abuse is not addressed.
33
33
@@ -80,7 +80,7 @@ The API should return a `200` response with the token in the form of a JSON web
80
80
81
81
## Step 3: Client application uses the token
82
82
83
-
The ISV's application can then pass the LimitedAccessToken as an HTTP request header for future Face API requests on behalf of the client. This works independently of other authentication mechanisms, so no personal information of the client's is ever leaked to the ISV.
83
+
The ISV's application can then pass the limited access token as an HTTP request header for future Face API requests on behalf of the client. This works independently of other authentication mechanisms, so no personal information of the client's is ever leaked to the ISV.
84
84
85
85
> [!CAUTION]
86
86
> The client doesn't need to be aware of the token value, as it can be passed in the background. If the client were to use a web monitoring tool to intercept the traffic, they'd be able to view the LimitedAccessToken header. However, because the token expires after a short period of time, they are limited in what they can do with it. This risk is known and considered acceptable.
Copy file name to clipboardExpand all lines: articles/ai-services/content-safety/concepts/response-codes.md
+7-7Lines changed: 7 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -8,7 +8,7 @@ manager: nitinme
8
8
ms.service: azure-ai-content-safety
9
9
ms.custom: build-2023
10
10
ms.topic: conceptual
11
-
ms.date: 05/09/2023
11
+
ms.date: 03/07/2024
12
12
ms.author: pafarley
13
13
---
14
14
@@ -18,9 +18,9 @@ The content APIs may return the following error codes:
18
18
19
19
| Error Code | Possible reasons | Suggestions |
20
20
| ---------- | ------- | -------------------- |
21
-
| InvalidRequestBody | One or more fields in the request body do not match the API definition. |1. Check the API version you specified in the API call. <br/>2. Check the corresponding API definition for the API version you selected. |
22
-
| InvalidResourceName | The resource name you specified in the URL does not meet the requirements, like the blocklist name, blocklist term ID, etc. |1. Check the API version you specified in the API call. <br/>2. Check whether the given name has invalid characters according to the API definition. |
23
-
| ResourceNotFound | The resource you specified in the URL may not exist, like the blocklist name. |1. Check the API version you specified in the API call. <br/> 2. Double check the existence of the resource specified in the URL. |
24
-
| InternalError | Some unexpected situations on the server side have been triggered. |1. You may want to retry a few times after a small period and see it the issue happens again. <br/> 2. Contact Azure Support if this issue persists. |
25
-
| ServerBusy | The server side cannot process the request temporarily. |1. You may want to retry a few times after a small period and see it the issue happens again. <br/>2.Contact Azure Support if this issue persists. |
26
-
| TooManyRequests | The current RPS has exceeded the quota for your current SKU. |1. Check the pricing table to understand the RPS quota. <br/>2.Contact Azure Support if you need more QPS. |
21
+
| InvalidRequestBody | One or more fields in the request body do not match the API definition. | Check the API version you specified in the API call. <br/>Check the corresponding API definition for the API version you selected. |
22
+
| InvalidResourceName | The resource name you specified in the URL does not meet the requirements, like the blocklist name, blocklist term ID, etc. | Check the API version you specified in the API call. <br/>Check whether the given name has invalid characters according to the API definition. |
23
+
| ResourceNotFound | The resource you specified in the URL may not exist, like the blocklist name. | Check the API version you specified in the API call. <br/>Double check the existence of the resource specified in the URL. |
24
+
| InternalError | Some unexpected situations on the server side have been triggered. | You may want to retry a few times after a small period and see it the issue happens again. <br/> Contact Azure Support if this issue persists. |
25
+
| ServerBusy | The server side cannot process the request temporarily. | You may want to retry a few times after a small period and see it the issue happens again. <br/>Contact Azure Support if this issue persists. |
26
+
| TooManyRequests | The current RPS has exceeded the quota for your current SKU. | Check the pricing table to understand the RPS quota. <br/>Contact Azure Support if you need more QPS. |
0 commit comments