Audio content creation: access denied to existing speech resource

Klaus Zuenkler 46 Reputation points
2020-12-18T09:58:20.09+00:00

I want to create a model in speech.microsoft.com and fail with a speech resource, where I have contributor access only (no access to the hosting RG of that resource). I can only work with a resource I created in the speech portal.
In the browser I am getting this error (debug window)
Request URL: https://westeurope.customvoice.api.speech.microsoft.com/api/texttospeech/v3.0-beta1/vcg/queryssmlfiles
Request Method: POST
Status Code: 401 Unauthorized

and in the portal notification:
Failed to fetch work files
Error: Authentication is required to access the resource.
Connection ID: d6b9edc0-4115-11eb-ab47-7b202b2f6dea
Audio Content Creation

Which additional right do I need?

Azure AI Speech
Azure AI Speech
An Azure service that integrates speech processing into apps and services.
1,774 questions
0 comments
Accepted answer
  1. romungi-MSFT 46,831 Reputation points Microsoft Employee
    2020-12-22T08:41:19.063+00:00

    @KlausZenkler-5575 You could define your custom RBAC roles and restrict the permissions available to the user. In the current scenario there is no option to delete a speech resource from speech studio though.

    The list for all Azure are available for download from here. The cognitive services area uses the IPs under CognitiveServicesManagement. This list is dynamic and could change from time to time, if you are planning to block access with the IP list. Depending on your region you can lookup your IP with nslookup and check if the IP is available in the downloaded list. The IP returned in my case is available in the list so you can do a quick check by blocking the IP you see with lookup. I hope this helps.

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Klaus Zuenkler 46 Reputation points
    2020-12-18T11:19:34.097+00:00

    I found the reason now:
    I the networking tab of the speech resource only "selected networks" were enabled. Switching to "all networks" fixed the issue.
    The error messages above are really misleading.

    I tried to lock down the networks and added my IP, but this did not help.
    Next question is: how to lock down the access so that only Speech portal would work?

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.