Update: Microsoft Foundry built-in RBAC role naming and enhancements

Role names in Microsoft Foundry have been updated to align with the product brand. The following built-in roles are now renamed:

• Azure AI Account Owner → Foundry Account Owner
• Azure AI Owner → Foundry Owner
• Azure AI User → Foundry User
• Azure AI Project Manager → Foundry Project Manager

In addition, role management capabilities have been enhanced to support evolving Foundry scenarios. Foundry Account Owner and Foundry Owner roles now include the ability to assign select dependent roles needed for common workflows, such as deploying hosted agents and accessing trace data. These roles can assign the following roles to themselves and others (conditional access):

• Foundry User
• Container Registry Contributor and Data Access Configuration Administrator
• Container Registry Repository Writer
• Log Analytics Reader

Permissions for Foundry User and Foundry Project Manager remain unchanged.

Learn More.