You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/search/search-security-rbac.md
+7-7Lines changed: 7 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -23,10 +23,10 @@ Azure provides a global [role-based access control authorization system](../role
23
23
24
24
+ Data plane operations, such as creating, loading, and querying indexes.
25
25
26
-
Per-user access over search results (sometimes referred to as row-level security or document-level security) isn't supported. As a workaround, [create security filters](search-security-trimming-for-azure-search.md) that trim results by user identity, removing documents for which the requestor shouldn't have access.
26
+
Per-user access over search results (sometimes referred to as *row-level security* or *document-level security*) isn't supported. As a workaround, [create security filters](search-security-trimming-for-azure-search.md) that trim results by user identity, removing documents for which the requestor shouldn't have access.
27
27
28
28
> [!NOTE]
29
-
> A quick note about terminology. "Control plane" refers to operations supported in the [Management REST API](/rest/api/searchmanagement/) or equivalent client libraries. "Data plane" refers to operations against the search service endpoint, such as indexing or queries, or any other operation specified in the [Search REST API](/rest/api/searchservice/) or equivalent client libraries.
29
+
> A quick note about terminology. *Control plane* refers to operations supported in the [Management REST API](/rest/api/searchmanagement/) or equivalent client libraries. *Data plane* refers to operations against the search service endpoint, such as indexing or queries, or any other operation specified in the [Search REST API](/rest/api/searchservice/) or equivalent client libraries.
30
30
31
31
## Built-in roles used in Search
32
32
@@ -197,7 +197,7 @@ Make sure that you [register your client application with Microsoft Entra ID](se
197
197
198
198
+ Search Index Data Contributors can load and query documents. To verify permissions, run the [Import data wizard](search-get-started-portal.md).
199
199
200
-
+ Search Index Data Readers can query the index. To verfiy permissions, use [Search explorer](search-explorer.md). You should be able to send queries and view results, but you shouldn't be able to view the index definition.
200
+
+ Search Index Data Readers can query the index. To verify permissions, use [Search explorer](search-explorer.md). You should be able to send queries and view results, but you shouldn't be able to view the index definition.
201
201
202
202
### [**REST API**](#tab/test-rest)
203
203
@@ -253,7 +253,7 @@ For more information on how to acquire a token for a specific environment, see [
253
253
254
254
1. Use [Azure.Identity for .NET](/dotnet/api/overview/azure/identity-readme) for token authentication. Microsoft recommends [`DefaultAzureCredential()`](/dotnet/api/azure.identity.defaultazurecredential) for most scenarios.
255
255
256
-
+When obtaining the OAuth token, the scope is `https://search.azure.com/.default`. The SDK requires the audience to be `https://search.azure.com` The `.default` is a Microsoft Entra convention.
256
+
+The SDK requires the scope to be `https://search.azure.com/.default`. The audience is `https://search.azure.com`. The `.default` suffix is a Microsoft Entra convention.
257
257
258
258
+ The SDK validates that the user has the "user_impersonation" scope, which must be granted by your app, but the SDK itself just asks for `https://search.azure.com/.default`.
259
259
@@ -548,17 +548,17 @@ To re-enable key authentication, rerun the last request, setting "disableLocalAu
Copy file name to clipboardExpand all lines: articles/search/search-what-is-azure-search.md
+3-10Lines changed: 3 additions & 10 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -55,7 +55,7 @@ Azure AI Search is well suited for the following application scenarios:
55
55
56
56
+ Use it for traditional full text search and next-generation vector similarity search. Back your generative AI apps with information retrieval that leverages the strength of keyword and similarity search. Use both modalities to retrieve the most relevant results.
57
57
58
-
+ Consolidate heterogeneous content into a user-defined and populated search index composed of vectors and text. You own and control what's searchable.
58
+
+ Consolidate heterogeneous content into a user-defined and populated search index composed of vectors and text. You maintain ownership and control over what's searchable.
59
59
60
60
+[Integrate data chunking and vectorization](vector-search-integrated-vectorization.md) for generative AI and RAG apps.
61
61
@@ -109,17 +109,10 @@ Customers often ask how Azure AI Search compares with other search-related solut
109
109
110
110
Key strengths include:
111
111
112
-
+ Support for vector and nonvector (text) indexing and queries. With vector similarity search, you can find information that’s semantically similar to search queries, even if the search terms aren’t exact matches.
113
-
+ Use hybrid search for the best of keyword and vector search.
114
-
+ Ranking and relevance tuning through semantic ranking and scoring profiles.
112
+
+ Support for vector and nonvector (text) indexing and queries. With vector similarity search, you can find information that’s semantically similar to search queries, even if the search terms aren’t exact matches. Use hybrid search for the best of keyword and vector search.
113
+
+ Ranking and relevance tuning through semantic ranking and scoring profiles. Query syntax supports term boosting and field prioritization.
115
114
+ Azure data integration (crawlers) at the indexing layer.
116
115
+ Azure AI integration for transformations that make content text and vector searchable.
117
116
+ Microsoft Entra security for trusted connections, and Azure Private Link for private connections in no-internet scenarios.
118
117
+[Full search experience](search-features-list.md): Linguistic and custom text analysis in 56 languages. Faceting, autocomplete queries and suggested results, and synonyms.
119
118
+ Azure scale, reliability, and global reach.
120
-
121
-
<!-- ## Watch this video
122
-
123
-
In this 15-minute video, review the main capabilities of Azure AI Search.
0 commit comments