{"registry_version":"2026.1025.387","generated_at":"2026-10-25T06:27:00Z","content_sha256":"089d16f627d9365e3d0663cc8069203706d7cb23a76c332226e29686968811a5","signed":true,"signature":{"key_id":"ed25519:74ca19268e364242","algorithm":"ed25519","expires_at":"2026-11-24T06:27:09Z","expired":false,"manifest":"/registry/manifest.json"},"id":"microsoft/azure-openai","name":"Azure OpenAI in Microsoft Foundry Models","vendor":"Microsoft","status":"researched","last_verified":null,"last_researched":"2026-10-25","summary":"Run OpenAI models (and other \"models sold by Azure\") inside your own Azure subscription. You need an Azure account with a subscription, an Azure OpenAI or Foundry resource, and a model deployment. Most models need no application any more; quota, a few limited-access models and abuse-monitoring opt-outs are the remaining gates.","account_model":{"summary":"A Microsoft or GitHub account signs up for Azure; that creates an Entra tenant and a billing account with a subscription. Inside the subscription you create a resource group, then an Azure OpenAI (or Foundry) resource in a region, then one or more model deployments. Keys belong to the resource; quota belongs to the subscription.","accounts":[{"name":"Microsoft account or GitHub account","kind":"personal","owned_by":"the person","required":true},{"name":"Azure subscription","kind":"billing","owned_by":"the person or the company","parent":"Microsoft account or GitHub account","required":true,"note":"Free account, pay-as-you-go, Enterprise Agreement or MCA. Quota tier is assessed per subscription."},{"name":"Azure OpenAI / Foundry resource","kind":"project","parent":"Azure subscription","required":true,"note":"Lives in one region and resource group; holds KEY1/KEY2 and the endpoint."},{"name":"Model deployment","kind":"other","parent":"Azure OpenAI / Foundry resource","required":true,"note":"API calls use the deployment name you choose, not the model name."}],"notes":["Microsoft recommends Microsoft Entra ID (for example a managed identity) instead of API keys."]},"prerequisites":[{"need":"An Azure subscription (a free account works to start, but free trials get little or no quota for some deployment types)"},{"entry":"microsoft/entra-app-registration","note":"Only if a server outside Azure will authenticate with Entra ID instead of an API key."}],"identity_requires":[],"have_ready":[{"kind":"payment_card","description":"A non-prepaid credit or debit card in your name","why":"Azure sign-up verifies identity with a card; continuing past the free credit needs pay-as-you-go billing.","needed_for":["azure-account","upgrade"],"auto_check":"none","source_url":"https://azure.microsoft.com/en-us/pricing/purchase-options/azure-account"},{"kind":"phone_for_2fa","description":"A phone that can receive a verification code","why":"Azure sign-up verifies a phone number.","needed_for":["azure-account"],"auto_check":"none","source_url":"https://azure.microsoft.com/en-us/pricing/purchase-options/azure-account"},{"kind":"other","description":"Which model and deployment type (Standard, Global Standard, Data Zone, Batch, Provisioned) and which region you need","why":"Model availability and quota vary by region, deployment type and subscription tier.","needed_for":["create-resource","deploy-model"],"auto_check":"none","source_url":"https://learn.microsoft.com/en-us/azure/foundry/openai/quotas-limits"},{"kind":"other","description":"A written description of your use case, users and safety mitigations","why":"Limited-access model and abuse-monitoring forms ask about your scenario, and the Code of Conduct requires disclosure, abuse controls and human oversight.","needed_for":["limited-access","abuse-monitoring"],"auto_check":"none","source_url":"https://learn.microsoft.com/en-us/legal/ai-code-of-conduct"}],"steps":[{"id":"azure-account","title":"Create an Azure account","summary":"Sign up with a Microsoft or GitHub account, verify a phone number and a non-prepaid card. Sign-up does not charge you; the free credit lasts up to 30 days.","route":"guided","gate":"human_payment","human_only":true,"gate_label":"You add payment details","depends_on":[],"optional":false,"url":"https://azure.microsoft.com/en-us/pricing/purchase-options/azure-account","lead_time":null,"preflight":[],"captures":null},{"id":"upgrade","title":"Move to pay-as-you-go","summary":"Free accounts must move to pay-as-you-go within 30 days or when the credit runs out, or services are disabled. Free trials and student subscriptions also get no batch quota, so upgrade before real use.","route":"guided","gate":"human_payment","human_only":true,"gate_label":"You add payment details","depends_on":["azure-account"],"optional":true,"url":"https://portal.azure.com/","lead_time":null,"preflight":[],"captures":null},{"id":"create-resource","title":"Create an Azure OpenAI resource","summary":"In the Azure portal choose Create a resource > Azure OpenAI, then pick subscription, resource group, region, a resource name and the Standard pricing tier, and choose network access (all networks, selected networks or private endpoint only). You need RBAC permission to create the resource. The Foundry portal may offer to upgrade it to a Foundry resource.","route":"guided","gate":"human_submit","human_only":true,"gate_label":"You press submit","depends_on":["azure-account"],"optional":false,"url":"https://portal.azure.com/#create/Microsoft.CognitiveServicesOpenAI","lead_time":null,"preflight":[],"captures":null},{"id":"deploy-model","title":"Deploy a model","summary":"In the Foundry portal open your resource > Deployments (or Models + endpoints) > Deploy model > Deploy base model, choose the model, a deployment name and a deployment type. Your code calls the deployment name.","route":"guided","gate":"human_submit","human_only":true,"gate_label":"You press submit","depends_on":["create-resource"],"optional":false,"url":"https://ai.azure.com/","lead_time":null,"preflight":[],"captures":null},{"id":"get-keys","title":"Copy the endpoint and key (or set up Entra ID)","summary":"On the resource's Keys and Endpoint page copy the endpoint and KEY1 (KEY2 is a spare for rotation). Microsoft recommends Microsoft Entra ID with managed identities instead of keys; if you use keys, keep them in a vault and rotate them.","route":"guided","gate":"human_login","human_only":true,"gate_label":"You sign in","depends_on":["create-resource"],"optional":false,"url":"https://portal.azure.com/","lead_time":null,"preflight":[],"captures":"AZURE_OPENAI_API_KEY"},{"id":"quota","title":"Request more quota (if needed)","summary":"Each subscription has a quota tier (Free Tier, Tiers 1-6) that rises automatically with use and payment history; enterprise agreements start higher. To get more now, submit the quota request form. Approved requests add quota without changing your tier.","route":"guided","gate":"third_party_review","human_only":true,"gate_label":"The provider reviews it","depends_on":["deploy-model"],"optional":true,"url":"https://aka.ms/oai/stuquotarequest","lead_time":null,"preflight":[],"captures":null},{"id":"limited-access","title":"Apply for a limited-access model (only some models)","summary":"A few models need registration, for example computer-use-preview (aka.ms/oai/cuaaccess) and xAI grok-4 / grok-code-fast-1 (aka.ms/xai/grok-4). Access is granted against Microsoft's eligibility criteria; approval for one limited model does not cover another.","route":"guided","gate":"third_party_review","human_only":true,"gate_label":"The provider reviews it","depends_on":["azure-account"],"optional":true,"url":"https://aka.ms/oai/cuaaccess","lead_time":null,"preflight":[],"captures":null},{"id":"abuse-monitoring","title":"Apply to modify abuse monitoring or guardrails (managed customers only)","summary":"By default, flagged prompts and outputs can be stored and reviewed (by AI and, if needed, by authorised Microsoft staff) for abuse. Customers managed by a Microsoft account team or in an eligible programme can apply to turn off that storage and human review, or to switch guardrails partly or fully off. After approval, the resource's JSON view shows ContentLogging false.","route":"guided","gate":"third_party_review","human_only":true,"gate_label":"The provider reviews it","depends_on":["create-resource"],"optional":true,"url":"https://learn.microsoft.com/en-us/azure/ai-foundry/responsible-ai/openai/limited-access","lead_time":null,"preflight":[],"captures":null}],"gates":[{"step":"azure-account","gate":"human_payment","label":"You add payment details"},{"step":"upgrade","gate":"human_payment","label":"You add payment details"},{"step":"create-resource","gate":"human_submit","label":"You press submit"},{"step":"deploy-model","gate":"human_submit","label":"You press submit"},{"step":"get-keys","gate":"human_login","label":"You sign in"},{"step":"quota","gate":"third_party_review","label":"The provider reviews it"},{"step":"limited-access","gate":"third_party_review","label":"The provider reviews it"},{"step":"abuse-monitoring","gate":"third_party_review","label":"The provider reviews it"}],"lead_times":[],"outputs":[{"name":"AZURE_OPENAI_API_KEY","description":"Resource key (KEY1 or KEY2) sent in the api-key header.","secret":true,"example_format":"opaque key string from Keys and Endpoint","environments":null},{"name":"AZURE_OPENAI_ENDPOINT","description":"Resource endpoint base URL.","secret":false,"example_format":"https://<resource-name>.openai.azure.com/","environments":null}],"renewals":[],"estimated_minutes":null,"guide_url":"https://verapli.com/guides/microsoft/azure-openai"}