cancel
Showing results for 
Search instead for 
Did you mean: 
Machine Learning
Dive into the world of machine learning on the Databricks platform. Explore discussions on algorithms, model training, deployment, and more. Connect with ML enthusiasts and experts.
cancel
Showing results for 
Search instead for 
Did you mean: 

Getting Permission Denied on model

BalaRamesh
New Contributor II

while creating service endpoint , getting permission denied error. Need help how to provide the permission.

 

BalaRamesh_0-1704953863222.png

 

7 REPLIES 7

Walter_C
Databricks Employee
Databricks Employee

If the model is from Workspace Model Registry, the creator of the endpoint must have Can Read permissions on the registered model of any model version that is specified in the endpoint configuration. If the model is from Unity Catalog, the creator of the endpoint must have the EXECUTE privilege on the registered model of any model version that is specified in the endpoint configuration, plus USE CATALOG and USE SCHEMA privileges on the parent catalog and schema of any such registered model.
https://docs.databricks.com/en/security/auth-authz/access-control/serving-endpoint-acl.html

Debayan
Databricks Employee
Databricks Employee

In addition to Walter's contribution, model permission is the issue on highlight here. 

BalaRamesh
New Contributor II

Thanks Walter and Debayan  to given the reply . We given the permission as per model and below are screen shots for reference.

BalaRamesh_0-1705040172306.png

BalaRamesh_1-1705040231336.png

BalaRamesh_3-1705040285219.png

We started  to understand about    LLM Chatbot With Retrieval Augmented Generation (RAG) and Llama 2 70B(https://notebooks.databricks.com/demos/llm-rag-chatbot/index.html#). We did the below steps before execute the code .

 

  1. We created the trail account in azure portal and created azure databricks with premium tier.
  2. Created the storage account with same resource group
  3. Created the azure access connect Access Connector for Azure Databricks
  4. Given the permission to the Azure Access Connector to access Storage
  5. In the Storage Account, using IAM given permission to Azure Access Connector Databricks
  6. We launched the Databricks and created a temporary cluster with 14GB memory and 4 Cores.
  7. Followed the tutorial (LLM Chatbot With Retrieval Augmented Generation (RAG) and Llama 2 70B)
  8. Executed the below commands .

    %pip install dbdemos

import dbdemos

dbdemos.install('llm-rag-chatbot')

9.Once executed the above commands, all related notebokes and cluster created but while start the cluster which is provided the demo , faced the error with insufficient executors then used the cluster which created temporary one at step 6. Then we are able to executed some of the commands until Splitting our html pages in smaller chunks  in 01-Data-Preparation-and-Index note book

10.  While running the next command Using Databricks Foundation model BGE as an embedding endpoint , here we created the model from databricks market place and tried to serve endpoint but we are getting access issue (permission issue).

 

 

Debayan
Databricks Employee
Databricks Employee

Hi @BalaRamesh , Could you please remove and add once again to see? 

Adheer
New Contributor II

I am facing the same issue for deploying BGE as embedding endpoint. It worked few days back but from today it is complaining with permission issue. I tried uninstalling and re-installing but that didn't solve the problem either.

Debayan
Databricks Employee
Databricks Employee

Hi, @Adheer , Any screenshot of the issue? 

Adheer
New Contributor II

@Debayan I managed to solve the issue using databricks sdk library. From UI it was failing with the same error as mentioned by @BalaRamesh 

Connect with Databricks Users in Your Area

Join a Regional User Group to connect with local Databricks users. Events will be happening in your city, and you won’t want to miss the chance to attend and share knowledge.

If there isn’t a group near you, start one and help create a community that brings people together.

Request a New Group