Merge pull request #258728 from mrbullwinkle/mrb_11_15_2023_rbac

[Azure OpenAI] RBAC updates

Author: prmerger-automator[bot]

articles/ai-services/openai/how-to/role-based-access-control.md

@@ -7,7 +7,7 @@ author: mrbullwinkle
 manager: nitinme
 ms.service: azure-ai-language
 ms.topic: how-to
-ms.date: 08/30/2022
+ms.date: 11/15/2023
 ms.author: mbullwin
 recommendations: false
 ---
@@ -52,7 +52,7 @@ If a user were granted role-based access to only this role for an Azure OpenAI r
 ✅ View the resource endpoint under **Keys and Endpoint** <br>
 ✅ Ability to view the resource and associated model deployments in Azure OpenAI Studio. <br>
 ✅ Ability to view what models are available for deployment in Azure OpenAI Studio. <br>
-✅ Use the Chat, Completions, and DALL-E (preview) playground experiences to generate text and images with any models that have already been deployed to this Azure OpenAI resource.
+✅ Use the Chat, Completions, and DALL-E (preview) playground experiences to generate text and images with any models that have already been deployed to this Azure OpenAI resource. <br>
 
 A user with only this role assigned would be unable to:
 
@@ -71,12 +71,12 @@ This role has all the permissions of Cognitive Services OpenAI User and is also
 
 ✅ Create custom fine-tuned models <br>
 ✅ Upload datasets for fine-tuning <br>
+✅ Create new model deployments or edit existing model deployments **[Added Fall 2023]**
 
 A user with only this role assigned would be unable to:
 
 ❌ Create new Azure OpenAI resources <br>
 ❌ View/Copy/Regenerate keys under **Keys and Endpoint** <br>
-❌ Create new model deployments or edit existing model deployments <br>
 ❌ Access quota <br>
 ❌ Create customized content filters <br>
 ❌ Add a data source for the use your data feature
@@ -94,13 +94,13 @@ This role is typically granted access at the resource group level for a user in
 ✅ Create customized content filters <br>
 ✅ Add a data source for the use your data feature <br>
 ✅ Create new model deployments or edit existing model deployments (via API) <br>
+✅ Create custom fine-tuned models **[Added Fall 2023]**<br>
+✅ Upload datasets for fine-tuning **[Added Fall 2023]**<br>
+✅ Create new model deployments or edit existing model deployments (via Azure OpenAI Studio) **[Added Fall 2023]**
 
 A user with only this role assigned would be unable to:
 
-❌ Create new model deployments or edit existing model deployments (via Azure OpenAI Studio) <br>
 ❌ Access quota <br>
-❌ Create custom fine-tuned models <br>
-❌ Upload datasets for fine-tuning
 
 ### Cognitive Services Usages Reader
 
@@ -131,6 +131,24 @@ All the capabilities of Cognitive Services Contributor plus the ability to:
 ✅ View & edit quota allocations in Azure OpenAI Studio <br>
 ✅ Create new model deployments or edit existing model deployments (via Azure OpenAI Studio) <br>
 
+## Summary
+
+| Permissions | Cognitive Services OpenAI User | Cognitive Services OpenAI Contributor |Cognitive Services Contributor |  Cognitive Services Usages Reader |
+|-------------|--------------------|------------------------|------------------|-------------------------|
+|View the resource in Azure Portal |✅|✅|✅| ➖ |
+|View the resource endpoint under “Keys and Endpoint” |✅|✅|✅| ➖ |
+|View the resource and associated model deployments in Azure OpenAI Studio |✅|✅|✅| ➖ |
+|View what models are available for deployment in Azure OpenAI Studio|✅|✅|✅| ➖ |
+|Use the Chat, Completions, and DALL-E (preview) playground experiences with any models that have already been deployed to this Azure OpenAI resource.|✅|✅|✅| ➖ |
+|Create or edit model deployments|❌|✅|✅| ➖ |
+|Create or deploy custom fine-tuned models|❌|✅|✅| ➖ |
+|Upload datasets for fine-tuning|❌|✅|✅| ➖ |
+|Create new Azure OpenAI resources|❌|❌|✅| ➖ |
+|View/Copy/Regenerate keys under “Keys and Endpoint”|❌|❌|✅| ➖ |
+|Create customized content filters|❌|❌|✅| ➖ |
+|Add a data source for the “on your data” feature|❌|❌|✅| ➖ |
+|Access quota|❌|❌|❌|✅|
+
 ## Common Issues
 
 ### Unable to view Azure Cognitive Search option in Azure OpenAI Studio