Skip to content

Commit 608b430

Browse files
committed
Extra polishing
1 parent c6704a4 commit 608b430

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

articles/ai-services/speech-service/role-based-access-control.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -22,12 +22,12 @@ You can manage access and permissions to your Speech resources with Azure role-b
2222
A role definition is a collection of permissions. When you create a Speech resource, the built-in roles in the following table are available for assignment.
2323

2424
> [!WARNING]
25-
> Speech service architecture differs from other Azure AI services in the way it uses [Azure control plane and data plane](../../azure-resource-manager/management/control-plane-and-data-plane.md). Speech service is extensively using data plane comparing to other Azure AI services, and this requires different set up for the roles. Because of this some general Cognitive Services roles have actual access right set that doesn't exactly match their name when used in Speech services scenario. For instance *Cognitive Services User* provides in effect the Contributor rights, while *Cognitive Services Contributor* provides no access at all. To keep consistency we recommend to use roles containing *Speech* in their names. These roles are *Cognitive Services Speech User* and *Cognitive Services Speech Contributor*. Their access right sets were designed specifically for the Speech service. In case you would like to use general Cognitive Services roles, we ask you to very carefully study the following access right table.
25+
> Speech service architecture differs from other Azure AI services in the way it uses [Azure control plane and data plane](../../azure-resource-manager/management/control-plane-and-data-plane.md). Speech service is extensively using data plane comparing to other Azure AI services, and this requires different set up for the roles. Because of this some general Cognitive Services roles have actual access right set that doesn't exactly match their name when used in Speech services scenario. For instance *Cognitive Services User* provides in effect the Contributor rights, while *Cognitive Services Contributor* provides no access at all. The same is true for generic *Owner* and *Contributor* roles which have no data plane rights and consequently provide no access to Speech resource. To keep consistency we recommend to use roles containing *Speech* in their names. These roles are *Cognitive Services Speech User* and *Cognitive Services Speech Contributor*. Their access right sets were designed specifically for the Speech service. In case you would like to use general Cognitive Services roles and Azure generic roles, we ask you to very carefully study the following access right table.
2626
2727
| Role | Can list resource keys | Access to data, models, and endpoints in custom projects| Access to speech transcription and synthesis APIs
2828
| ---| ---| ---| ---|
29-
|**Owner** |Yes |View, create, edit, and delete |Yes |
30-
|**Contributor** |Yes |View, create, edit, and delete |Yes |
29+
|**Owner** |Yes |None |No |
30+
|**Contributor** |Yes |None |No |
3131
|**Cognitive Services Contributor** |Yes |None |No |
3232
|**Cognitive Services User** |Yes |View, create, edit, and delete |Yes |
3333
|**Cognitive Services Speech Contributor** |No | View, create, edit, and delete |Yes |

0 commit comments

Comments
 (0)