Blog Post

Azure AI Foundry Blog
8 MIN READ

Organising the AI Foundry: A Practical Guide for Enterprise Readiness

arung's avatar
arung
Icon for Microsoft rankMicrosoft
Jul 16, 2025

A high-level guide to setting up and scaling an AI Foundry Resource within an enterprise

Purpose of the document provide overview of AI Foundry and how it can be set up and organised for at scale for an enterprise.  This document should be considered as guidance and recommendations, but ...
Updated Jul 16, 2025
Version 1.0
azure ai services
azure openai service
AKUS's avatar
AKUS
Copper Contributor
Jul 17, 2025

Hi arung​ 

It appears that setting project-scoped RBAC is not working as expected. Currently, developers must be assigned the Azure AI User role at the Azure AI Foundry Resources scope in order to access LLM and AI service endpoints.

The issue is that assigning this role at the Foundry Resources level causes the permissions to be inherited by all child Foundry Projects. This inheritance makes it impossible to restrict a user’s access to a specific Foundry project only.