The AI Portal allows a user to restrict a provider to a subset of users.

  1. Make sure the role exists in App Registrations (If your role exists in the Azure portal, skip to step 2)

    1. Go to App Registrations in the Azure Portal and find your application (usually has AI Portal)

      image.png

    2. From there, go to Manage → App roles and click “Create app role”.

    Display Name: A user friendly display name (i.e. External Provider Access Role). Used when granting access in the enterprise applications screen Allowed Member Types: Users/Groups Value: usually the display name with no uppercase letters and underscores (i.e. external_provider_access_role). This is what gets passed in to the application. Description: A description of your role

    Note the value of the role once added (here it’s: external_provider_access_role)

     ![image.png](attachment:9ff5b846-689f-413b-a894-2482453bf741:image.png)

  2. Once added, head to your AI Portal and in the Admin Panel under Provider Config, select the provider you’re restricting and add the value copied to the “Required AI Portal Roles”. Click save

    image.png

  3. That provider will now be hidden from users without the role(s) assigned. For more information on how to assign a role to a user, click here