From c1f94832370fb2f28fa2a517e6fca373c59f61d4 Mon Sep 17 00:00:00 2001 From: DOliana Date: Thu, 20 Jun 2024 09:57:21 +0200 Subject: [PATCH] Update README.md --- README.md | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/README.md b/README.md index 0f76b55136..236a0b487c 100644 --- a/README.md +++ b/README.md @@ -192,16 +192,16 @@ The Citation panel is defined at the end of `frontend/src/pages/chat/Chat.tsx`. The app uses Azure OpenAI on your data [(see documentation)](https://learn.microsoft.com/en-us/azure/ai-services/openai/references/on-your-data). To enable Entra ID for intra-service authentication -1. enable managed identity on Azure OpenAI -2. configure AI search to allow access from Azure OpenAI - 1. enable Role Based Access control on the used AI search instance [(see documentation)](https://learn.microsoft.com/en-us/azure/search/search-security-enable-roles) - 2. assign `Search Index Data Reader` and `Search Service Contributor` to the identity of the Azure OpenAI instance +1. Enable managed identity on Azure OpenAI +2. Configure AI search to allow access from Azure OpenAI + 1. Enable Role Based Access control on the used AI search instance [(see documentation)](https://learn.microsoft.com/en-us/azure/search/search-security-enable-roles) + 2. Assign `Search Index Data Reader` and `Search Service Contributor` to the identity of the Azure OpenAI instance 3. Do not configure `AZURE_SEARCH_KEY` and `AZURE_OPENAI_KEY` to use Entra ID authentication. -4. configure the webapp identity - 1. enable managed identity in the app service that hosts the webapp +4. Configure the webapp identity + 1. Enable managed identity in the app service that hosts the webapp 2. Go to the Azure OpenAI instance and assign the role `Cognitive Services OpenAI User` to the identity of the webapp -note: RBAC assignments can take a few minutes before becoming effective. +Note: RBAC assignments can take a few minutes before becoming effective. ### Best Practices We recommend keeping these best practices in mind: