403 error, when refreshing my ai foundry components, although I am connected to my project

[ingo-at-vattenfall]

Does this occur consistently?
Repro steps:

1. login and select project
2. hit refresh

Action: AgentRootTreeNode.getChildren
Error type: c
Error Message: 403: Forbidden

Version: 0.5.1
OS: win32
OS Release: 10.0.19045
Product: Visual Studio Code
Product Version: 1.100.2
Language: en

Call Stack

F.handleResponse extension.js:2:3069052
F.fetchAgentPage extension.js:2:3061470
F.listAgents extension.js:2:3061204
h.getChildren extension.js:2:3210194
extension.js:2:3102961extension.js:2:3102961

[hund030]

This looks like a permission issue. Agents service requires specific roles requirement. You can reference to this document for more details. We usually use Azure AI User.
https://learn.microsoft.com/en-us/azure/ai-foundry/concepts/rbac-azure-ai-foundry?pivots=fdp-project#azure-ai-foundry-project-roles

The extension should throw a more friendly error message for these kinds of error. We will follow up. Before we make a progress, you can try the Azure AI Foundry Portal, which should pop up an error message as following:

Let me know if this doesn't resolve your issue.

[ingo-at-vattenfall]

Hmhh, I added the role Azure AI User and still get the 403. In the browser I can access the agents and create new ones. When I created an FAQ Agent with gpt-4.1 model behind. When I hit refresh in VSCode I also get:
Element with id /subscriptions.../resourceGroups/...-project...-rg/providers/Microsoft.CognitiveServices/accounts/aiservicesprj.../deployments/gpt-4.1 is already registered

[hund030]

This could be caused by cached token expired. Do you still get the error after reloading VS Code or re-login to your Azure account?

[ingo-at-vattenfall]

Yes, I logged out and in again and still the 403. I think it has something to do with our internal firewalls.

[JerryYangKai]

This issue is in-active for two weeks, close it.
Feel free to re-open it.