Unable to access Document Intelligent Studio

To access and use Azure Document Intelligence Studio, the following conditions and configurations are required.

1. Verify required Azure roles

• An active Azure account and subscription with at least a Reader role is required to open Document Intelligence Studio.
• To actually analyze documents with prebuilt or custom models, the following roles are required:
  • For basic use (prebuilt models and Studio access):
    • Cognitive Services User on the Document Intelligence or Azure Cognitive Services multiple-service (Foundry) resource.
  • For custom model projects:
    • Cognitive Services User on the Document Intelligence or Cognitive Services multiple-service resource.
    • Storage Blob Data Contributor on the storage account used by the project.
• Contributor or Storage Account Contributor alone is not sufficient when local (key-based) authentication is disabled; Cognitive Services User and Storage Blob Data Contributor are still required to use Studio features.

2. Check authentication mode and permissions

• If local (key-based) authentication is disabled on the Document Intelligence resource:
  • Cognitive Services User is required to enter the analyze page and use the resource.
  • Contributor can only manage the resource (including listing keys) but cannot use it via Microsoft Entra ID.
• If local (key-based) authentication is enabled, access keys can be used instead of Microsoft Entra roles, but Studio basic access still requires at least Reader on the subscription.

3. Confirm Studio sign-in and resource configuration

• Sign in to Document Intelligence Studio using the appropriate URL for the cloud environment:
  • Commercial: Document Intelligence Studio.
  • US Government: Document Intelligence Studio US Government.
  • China: Document Intelligence Studio China.
• On first sign-in, configure the service resource:
  • Select the correct subscription.
  • Select or create the appropriate resource group.
  • Select the existing Document Intelligence or Microsoft Foundry resource.
• To verify the resource in use and its details (name, pricing tier), open the Studio home page, select the Settings icon, then the Resource tab, and confirm the resource is accessible.

4. Fix common sign-in and access issues

• If the page does not load or stays stuck:
  • Ensure third-party/non-Microsoft cookies are allowed for the Studio URL.
  • If receiving InteractionRequiredAuthError:login_required:AADSTS50058, adjust browser cookie settings as described below.
• If errors appear when opening projects or running analysis:
  • PermissionDenied when using prebuilt apps or opening a custom project:
    • Indicates insufficient permission to the Document Intelligence resource when key-based auth is disabled.
    • Assign Cognitive Services User (not just Contributor) to the user for that resource.
  • AuthorizationPermissionMismatch when opening a custom project:
    • Indicates insufficient permission to the storage account when key-based auth is disabled.
    • Assign Storage Blob Data Contributor to the user for the storage account used by the project.
  • Form Recognizer Not Found when opening a custom project:
    • The bound Document Intelligence resource was deleted or moved.
    • Either recreate the resource with the same name, subscription, and resource group, or recreate the custom project bound to the new/migrated resource and same storage account.

5. Adjust browser settings for cookies If sign-in or Studio loading fails due to cookie blocking, configure the browser as follows:

• Microsoft Edge
  • Settings → search for “third-party”.
  • Go to “Manage and delete cookies and site data”.
  • Turn off “Block third-party cookies”.
• Chrome
  • Settings → search for “Third-party”.
  • Under “Default behavior”, select “Allow third-party cookies”.
• Firefox
  • Settings → search for “cookies”.
  • Under “Enhanced Tracking Protection”, select “Manage Exceptions”.
  • Add an exception for the Document Intelligence Studio URL of the environment.

If access is still not possible after confirming roles, authentication mode, and browser settings, an administrator should verify that the correct roles (Cognitive Services User and, if needed, Storage Blob Data Contributor) are assigned on the exact resources used by Studio.

References:

• Get started: Document Intelligence Studio
• Frequently asked questions
• What is Azure Document Intelligence in Foundry Tools?
• Document Intelligence invoice model
• Speed Studio page stuck in loading - Microsoft Q&A
• Document Intelligence classification and extraction requests timing out - Microsoft Q&A
• Unable to access this even after accesses - Microsoft Q&A
• Problem Viewing thread. - Microsoft Q&A
• Can not access Azure - Microsoft Q&A