azure-search-openai-demo icon indicating copy to clipboard operation
azure-search-openai-demo copied to clipboard

how to handle information protection

Open MazenSiraj opened this issue 2 years ago • 6 comments

Can someone please explain how to handle information protection to preform permissions on documents ?

MazenSiraj avatar Jun 05 '23 10:06 MazenSiraj

@MazenSiraj so you want each user to have specific access to specific file ?

itmilos avatar Jun 05 '23 12:06 itmilos

@itmilos Yes. I need let's say for me as Mazen, when I search on some data related to me, like my employment contract info, my salary, or related projects, it appears for me only. At the same time, I need when you, as another user, ask on some private data related to me, it says "I don't know."

I tried to implement permissions on the resource group on Azure Portal, but it showed an Unauthorized error at the response even if just said Hi.

MazenSiraj avatar Jun 05 '23 12:06 MazenSiraj

I'm looking for something similar. I just want to lock it down so only employees can access. I'm very new to Azure Apps.

EnduroRacer18 avatar Jun 08 '23 18:06 EnduroRacer18

This is not supported by this accelerator at the moment. Have a look at the following documentation of Azure Cognitive Search (the underlying solution to ground the prompt with the relevant documents).

https://learn.microsoft.com/en-us/azure/search/search-security-trimming-for-azure-search https://learn.microsoft.com/en-us/azure/search/search-security-trimming-for-azure-search-with-aad

iMicknl avatar Jun 08 '23 19:06 iMicknl

@itmilos Yes. I need let's say for me as Mazen, when I search on some data related to me, like my employment contract info, my salary, or related projects, it appears for me only. At the same time, I need when you, as another user, ask on some private data related to me, it says "I don't know."

I tried to implement permissions on the resource group on Azure Portal, but it showed an Unauthorized error at the response even if just said Hi.

I think you could do this with https://github.com/microsoft/semantic-kernel I would suggest to propose this as feature there.

itmilos avatar Jun 12 '23 11:06 itmilos

@EnduroRacer18

For general access to link you can go to App Service -> Identity -> Create New -> Microsoft

itmilos avatar Jun 12 '23 11:06 itmilos

cc @mattmsft who is merging a PR to enable document-level access control.

pamelafox avatar Sep 25 '23 20:09 pamelafox

Hey folks - can you please take a look at this doc and see if it solves your problems? LoginAndAclSetup.md

mattgotteiner avatar Sep 26 '23 00:09 mattgotteiner

This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this issue will be closed.

github-actions[bot] avatar Dec 21 '23 01:12 github-actions[bot]

Closing this issue since Matt linked to the doc about the access control feature, and there have been no follow-up questions.

pamelafox avatar May 15 '24 22:05 pamelafox