On creating a project in Document Understanding service and linking it to AIC project by creating it, the AIC project is not visible in AI Center for further actions.
Issue Description:
Unable to see the AIC project in AIC service, which is created during linking to DU project in DU service.
Root Cause: An AIC project created in DU service will not have "Restrict Access" disabled by default. Hence, by default, non-admin users cannot see the project in AIC even though they are the ones who created it in DU service in first place.
Resolution:
The service token which DU service uses to call to create AIC project as in screenshot above, does not have any details about user / user permissions, as DU service does not have any RBAC settings. Hence any user can create a new AIC project in DU service during linking.
But only admin or users who are having atleast view permission on Projects at tenant level in AIC can see AIC projects that they are not part of.
Reference: AI Center - Project Level Access Control
Also, a project created as above will not have "Restrict Access" disabled by default. Only when it is enabled, the project level permissions are applied and the "settings" tab can be seen in project, where non-admin users can be added to the project. Hence, by default, non-admin users cannot see the project in AIC even though they are the ones who created it in DU service in first place.
Refer the details at AI Center - Project Level Access Control: Restricting Access To An Existing Project
If a user is not having tenant admin role or specifically any permissions on Projects at tenant level in AIC and if a project is created in AIC using DU service, follow steps below to gain access to project.
- Admin to open AIC, click on menu of the project, and then click on edit.
- Enable "Restrict Access" inside the Edit project window.
- Now, admin can open the project and access "Settings" tab, where they can add access for users to the project.
- Once access has been provided by admin, users should be able to access the project without any issues.