evaluate.py: Documentation is missing required permission "Storage Blob Data Contributor"

[bmerkle]

Please provide us with the following information:

This issue is for a: (mark with an x)

- [x] bug report -> please search issues before submitting
- [ ] feature request
- [x] documentation issue or request
- [ ] regression (a behavior that used to work and stopped in a new release)

Minimal steps to reproduce

run python.evaluate.py with a normal development user (not the user who owns the subscrption)
During upload, we get an exception because the Role "Storage Blob Data Contributor" is missing.

Fix: add the Role "Storage Blob Data Contributor" to the resource group.
We should add this information into the documentation

Any log messages given by the failure

.venv) PS C:\work\Azure-Samples\rag-data-openai-python-promptflow\tutorial> python evaluate.py
[2024-09-03 14:00:08 +0200][promptflow._sdk._orchestrator.run_submitter][INFO] - Upload run to cloud: True
Prompt flow service has started...
You can view the traces in local from http://127.0.0.1:23333/v1.0/ui/traces/?#run=main_copilot_wrapper_w7ddcjbq_20240903_140008_012850
You can view the traces in azure portal since trace destination is set to: azureml://subscriptions/..../resourceGroups/rg-cla3....ai/providers/Microsoft.MachineLearningServices/workspaces/contoso-outdoor-proj. The link will be printed once the run is finished.
[2024-09-03 14:00:51 +0200][promptflow._sdk._orchestrator.run_submitter][INFO] - Submitting run main_copilot_wrapper_w7ddcjbq_20240903_140008_012850, log path: C:\Users.....promptflow.runs\main_copilot_wrapper_w7ddcjbq_20240903_140008_012850\logs.txt
[2024-09-03 14:02:17 +0200][promptflow._sdk._orchestrator.run_submitter][INFO] - Uploading run 'main_copilot_wrapper_w7ddcjbq_20240903_140008_012850' to cloud...
Traceback (most recent call last):
File "C:\Users.....venv\Lib\site-packages\promptflow\azure\operations_async_run_uploader.py", line 439, in _upload_single_blob
await blob_client.upload_blob(f, overwrite=self.overwrite)
File "C:\Users.....venv\Lib\site-packages\azure\core\tracing\decorator_async.py", line 94, in wrapper_use_tracer
return await func(*args, **kwargs)
^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "C:\Users.....venv\Lib\site-packages\azure\storage\blob\aio_blob_client_async.py", line 419, in upload_blob
return await upload_block_blob(**options)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "C:\Users.....venv\Lib\site-packages\azure\storage\blob\aio_upload_helpers.py", line 172, in upload_block_blob
process_storage_error(error)
File "C:\Users.....venv\Lib\site-packages\azure\storage\blob_shared\response_handlers.py", line 184, in process_storage_error
exec("raise error from None") # pylint: disable=exec-used # nosec
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "", line 1, in
azure.core.exceptions.HttpResponseError: This request is not authorized to perform this operation using this permission.
RequestId:e174f5a1-501e-008a-5bf9-fd9754000000
Time:2024-09-03T12:02:22.2867000Z
ErrorCode:AuthorizationPermissionMismatch
Content: AuthorizationPermissionMismatchThis request is not authorized to perform this operation using this permission.
RequestId:e174f5a1-501e-008a-5bf9-fd9754000000
Time:2024-09-03T12:02:22.2867000Z

Expected/desired behavior

OS and Version?

Windows 7, 8 or 10. Linux (which distribution). macOS (Yosemite? El Capitan? Sierra?)

Versions

Mention any other details that might be useful

---

Thanks! We'll be in touch soon.

[bmerkle]

Hello @eric-urban or @dbradish-microsoft can you please have a look at my MR ?

[dbradish-microsoft]

Hello, @bmerkle , I am the Azure CLI doc's lead. @eric-urban can respond.

[bmerkle]

Hello @dbradish-microsoft , thanks for getting back to me

I added some additional information into the docs.
Currently the information about the necessary Roles in Azure are missing, and so following the tutorial result in an error msg.
I think the role Storage Blob Data Contributor has to be added.
Can you have a look at my PR ? I already fixed it and this could be merged IMO.

kind regards
Bernhard

[bmerkle]

Hello @eric-urban, can you please have a look at my PR ?
it fixes actually a bug in the examples/tutorials, because there are missing permissions
thanks :-)