Generally Available: Managed identity for Foundry billing calls from Azure AI Search

Azure AI Search now supports managed identity authentication for the billing operations it issues against Microsoft Foundry resources, replacing the prior key-based flow. Customers assign a system-assigned or user-assigned identity to the search service, grant it the appropriate role on the Foundry account, and skill executions that call Foundry models for embeddings, chat completions, or extraction bill through that identity. Security teams remove another long-lived secret from their environment, simplify rotation, and gain Entra-based audit trails for cross-service calls. The change is available in all regions where Azure AI Search and Microsoft Foundry are colocated, and applies to indexer skillsets that invoke Foundry models.

Learn more.