"Public access is disabled. Please configure private endpoint." even though private endpoint configured for Azure OpenAI Service – Azure

by
Ali Hasan
azure-active-directory azure-openai azure-private-dns-zone azure-virtual-network

Quick Fix: To create a private endpoint for OpenAI Studio, you will need to integrate the private endpoint with a Private DNS Zone, as per Microsoft’s suggestion.

The Solutions:

Solution 1: Configure Private Endpoint via Private DNS Integration

To resolve the issue of "Public access is disabled. Please configure private endpoint", even after configuring a private endpoint for the Azure OpenAI Service, the following steps should be taken:

  1. Create a private DNS zone to integrate with the private endpoint. The private DNS zone should be named as "privatelink.openai.azure.com".
  2. Create an A record within the private DNS zone. The A record should point to the private IP address of the private endpoint.
  3. Link the virtual network with the private DNS zone. This allows the virtual network to resolve the DNS name of the private endpoint using the private DNS zone.
  4. Verify the private endpoint configuration by accessing the OpenAI Service from within the virtual network. If the connection is successful, the error should no longer appear.

Q&A

Why do I get "Public access is disabled" for Azure OpenAI Service even with a private endpoint configured?

Ensure your private endpoint is integrated with a Private DNS Zone.