Microsoft Foundry RBAC Management
Reference for managing RBAC for Microsoft Foundry resources: user permissions, managed identity configuration, and service principal setup for CI/CD.
Quick Reference
| Property | Value |
|---|---|
| CLI Extension | az role assignment, az ad sp |
| Resource Type | Microsoft.CognitiveServices/accounts |
| Best For | Permission management, access auditing, CI/CD setup |
When to Use
- Grant user access to Foundry resources or projects
- Set up developer permissions (Project Manager, Owner roles)
- Audit role assignments or validate permissions
- Configure managed identity roles for connected resources
- Create service principals for CI/CD pipeline automation
- Troubleshoot permission errors
Foundry Built-in Roles
| Role | Create Projects | Data Actions | Role Assignments |
|---|---|---|---|
| Foundry Agent Consumer | No | Invoke agents only | No |
| Foundry User | No | Yes | No |
| Foundry Project Manager | Yes | Yes | Yes (Foundry User only) |
| Foundry Account Owner | Yes | No | Yes (Foundry User only) |
| Foundry Owner | Yes | Yes | Yes |
⚠️ Warning: Foundry User is auto-assigned via Portal but NOT via SDK/CLI. Automation must explicitly assign roles.