Table of Contents | ||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|
|
...
Azure Subscription Management Contributor/Owner
The user must have the role Contributor or Owner for the subscription being used
Permission to Create and Manage Enterprise Applications
The user needs permissions to create and manage Enterprise Applications within Entra ID (formally known as Azure AD).
Permission to Alter DNS Configuration
The user must have permissions to alter DNS records for custom domain setup (only required if the auto generated URL used by users to access the application is to be changed to something more readable)
...
Select the subscription from the dropdown, and create a new resource group or select an existing one (circled in purple above)
Select one of these alternative regions from the dropdown menu (circled in orange). This selection determines what LLM that will be used and what laws that will be applied. EU customers should for legal reasons select one of the two EU regions listed at the top and if one want to use GPT-4o (what at the time of this writing is considered the most accurate model) Sweden,, select Sweden.
France Central (GPT-4 1106-Preview)
Sweden Central (GPT-4o)
UK South (GPT-4 1106-Preview)
Canada East (GPT-4 1106-Preview)
East US (GPT-4o, coming soon)
Check the checkbox to verify you have been granted access to Azure OpenAI with selected subscription (circled in yellow above)
Click the white Next or the blue Review + create button. This will take one to the Review + create page.
...
One can use a Service Principal that already exists or create a new one
Depending on which of the two options one chose, clicking the Make selection link will either bring up a search pane with existing Service Principals to choose from, or a form to register a new Service Principal. The screenshot above shows the case of creating a new one.
Give the Service Principal (the Entra ID application) a name, for instance AyfiePersonalAssistantApp as done in the example above.
Select the single tenant option (this would cover the case of all users being employees of the customer)
Click the Register button. This will take one away from the page. To get back, use the path at the top of the page as indicated by the green arrow.
Verify that one has created or selected a Service Principal by checking of the check box
Click Next (circled in red) to get to the Authentication page
...