AzRoleAdvertizer

last sync: 2025-Oct-31 18:22:44 UTC

Cognitive Services OpenAI User

Azure BuiltIn RBAC Role definition

NameCognitive Services OpenAI User
Microsoft Learn
Id5e0bd9bd-7b93-4f28-af87-19fc36ad61bd
DescriptionAbility to view files, models, deployments. Readers can't make any changes They can inference and create images
CategoryAI + machine learning
Microsoft Learn
CreatedOn2022-10-26 22:25:33 UTC
UpdatedOn2025-04-28 15:13:50 UTC
Permissions summary Effective control plane and data plane operations: 107 (unique operations)
•action: 12
•delete: 8
•read: 78
•write: 9

Actions: 3
Resolved control plane operations from Actions: 49
Effective control plane operations: 49
•read: 49

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 17384

DataActions: 16
Resolved data plane operations: 59
Effective data plane operations: 58
•action: 12
•delete: 8
•read: 29
•write: 9

NotDataActions: 1
Resolved data plane operations from NotDataActions: 1
Effective denied data plane operations: 4020
Actions
Operation Description
Microsoft.Authorization/roleAssignments/readGet information about a role assignment.
Microsoft.Authorization/roleDefinitions/readGet information about a role definition.
Microsoft.CognitiveServices/*/readwildcarded / no description
NotActions n/a
DataActions
Operation Description
Microsoft.CognitiveServices/accounts/OpenAI/*/readwildcarded / no description
Microsoft.CognitiveServices/accounts/OpenAI/assistants/*wildcarded / no description
Microsoft.CognitiveServices/accounts/OpenAI/deployments/audio/actionReturn the transcript or translation for a given audio file.
Microsoft.CognitiveServices/accounts/OpenAI/deployments/chat/completions/actionCreates a completion for the chat message
Microsoft.CognitiveServices/accounts/OpenAI/deployments/completions/actionCreate a completion from a chosen model.
Microsoft.CognitiveServices/accounts/OpenAI/deployments/embeddings/actionReturn the embeddings for a given prompt.
Microsoft.CognitiveServices/accounts/OpenAI/deployments/extensions/chat/completions/actionCreates a completion for the chat message with extensions
Microsoft.CognitiveServices/accounts/OpenAI/deployments/realtime/actionCreates a realtime connection to the deployment.
Microsoft.CognitiveServices/accounts/OpenAI/deployments/search/actionSearch for the most relevant documents using the current engine.
Microsoft.CognitiveServices/accounts/OpenAI/engines/completions/actionCreate a completion from a chosen model
Microsoft.CognitiveServices/accounts/OpenAI/engines/generate/action(Intended for browsers only.) Stream generated text from the model via GET request. This method is provided because the browser-native EventSource method can only send GET requests. It supports a more limited set of configuration options than the POST variant.
Microsoft.CognitiveServices/accounts/OpenAI/engines/search/actionSearch for the most relevant documents using the current engine.
Microsoft.CognitiveServices/accounts/OpenAI/images/generations/actionCreate image generations.
Microsoft.CognitiveServices/accounts/OpenAI/responses/*wildcarded / no description
Microsoft.CognitiveServices/accounts/OpenAI/video/generations/*/actionwildcarded / no description
Microsoft.CognitiveServices/accounts/OpenAI/video/generations/*/deletewildcarded / no description
NotDataActions
Operation Description
Microsoft.CognitiveServices/accounts/OpenAI/stored-completions/readQuery completions data using filters or Get single completion data using completion Id or Get metadata for the given account
Used in
BuiltIn Policy		 none
History
Date/Time (UTC ymd) (i) Change Change detail
2025-04-28 19:51:08 change: DataActions DataActions: 'add Microsoft.CognitiveServices/accounts/OpenAI/video/generations/*/delete'
2025-03-17 18:27:14 change: DataActions DataActions: 'add Microsoft.CognitiveServices/accounts/OpenAI/video/generations/*/action; add Microsoft.CognitiveServices/accounts/OpenAI/responses/*'
2024-12-04 18:55:44 change: DataActions, NotDataActions DataActions: 'add Microsoft.CognitiveServices/accounts/OpenAI/deployments/realtime/action; add Microsoft.CognitiveServices/accounts/OpenAI/assistants/*',
NotDataActions: 'add Microsoft.CognitiveServices/accounts/OpenAI/stored-completions/read'
2024-04-15 17:47:24 change: Description, DataActions New Description: 'Ability to view files, models, deployments. Readers can't make any changes They can inference and create images'
Old Description: 'Ability to view files, models, deployments. Readers are able to call inference operations such as chat completions and image generation.',
DataActions: 'add Microsoft.CognitiveServices/accounts/OpenAI/deployments/audio/action'
2023-12-01 19:16:58 change: DataActions DataActions: 'remove Microsoft.CognitiveServices/accounts/OpenAI/engines/completions/write; remove Microsoft.CognitiveServices/accounts/OpenAI/deployments/completions/write'
2023-08-14 17:58:07 change: Description, DataActions New Description: 'Ability to view files, models, deployments. Readers are able to call inference operations such as chat completions and image generation.'
Old Description: 'Ability to view files, models, deployments. Readers can't make any changes They can inference',
DataActions: 'add Microsoft.CognitiveServices/accounts/OpenAI/images/generations/action'
2023-05-31 17:45:21 change: DataActions DataActions: 'add Microsoft.CognitiveServices/accounts/OpenAI/deployments/extensions/chat/completions/action'
2023-04-12 17:42:01 change: DataActions DataActions: 'add Microsoft.CognitiveServices/accounts/OpenAI/deployments/chat/completions/action'
2022-10-27 16:42:48 add: Role 5e0bd9bd-7b93-4f28-af87-19fc36ad61bd
JSON
api-version=2023-07-01-preview
Condition none