From the course: Azure OpenAI Services Security

Unlock this course with a free trial

Join today to access over 25,500 courses taught by industry experts.

Access control

Access control

- [Instructor] Azure OpenAI supports two access modes, centrally-managed identity, using Entra ID, and local authentication using API keys. Entra ID authentication benefits from using a centrally-managed identity provider and from granular access control. Local authentication relies only on the secret API key. If you have the key, you can make any modifications to the OpenAI instance. You should avoid using the local authentication whenever possible. Always use Entra ID authentication for end-users, developers, administrators, and data scientists. In addition to the standard built-in role-based access-controlled roles, there are two built-in roles available for Azure OpenAI. Both grant access to the data plane of the deployed OpenAI instance. Cognitive Services OpenAI User. This role provides prompt completion access, as well as limited access to view model and deployment information. While still quite powerful, this is the standard role the user should be granted. Cognitive Services…

Contents