Skip to content

docs(skill): require Cognitive Services OpenAI User as prereq RBAC role#204

Merged
placerda merged 1 commit into
mainfrom
hotfix/rbac-prereq-openai-user
May 29, 2026
Merged

docs(skill): require Cognitive Services OpenAI User as prereq RBAC role#204
placerda merged 1 commit into
mainfrom
hotfix/rbac-prereq-openai-user

Conversation

@placerda
Copy link
Copy Markdown
Contributor

Hotfix mirror of #203 (already merged to develop). Same six files, identical content (CHANGELOG entry preserved through CRLF/LF conflict via stage-2 blob workaround).

…le (#203)

Foundry `azure_ai_evaluator` graders impersonate the OIDC principal
to call OpenAI; without `Cognitive Services OpenAI User` on the
underlying AI Services account the graders fail with a 401
PermissionDenied and every cloud eval metric returns null. Verified
end-to-end on placerda/agentops-prompt-quickstart: after granting the
role, the first PR run goes green from scratch.

- agentops-workflow SKILL.md: pre-dispatch checks now list both Foundry
  User (Foundry project) AND Cognitive Services OpenAI User (AI
  Services account), with role ids and az role assignment create
  commands for each.
- tutorial-prompt-agent-quickstart.md: step 12's Copilot prompt and the
  workflow-skill walkthrough list both roles.
- tutorial-end-to-end.md: both workflow-skill prompts list both roles.
- docs/ci-github-actions.md: prerequisite section lists both roles with
  the OpenAI graders' failure mode spelled out.
- plugins/agentops/skills/agentops-workflow/SKILL.md: synced from src/.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@placerda placerda merged commit 690db38 into main May 29, 2026
1 check passed
@placerda placerda deleted the hotfix/rbac-prereq-openai-user branch May 29, 2026 08:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant