Quickstart: Set up Microsoft Foundry resources

Learn how to create a Microsoft Foundry project, deploy a model, and grant access to team members so they can build AI applications.

Quickstart: Set up Microsoft Foundry resources

In this quickstart, you create a Microsoft Foundry project and deploy a model. If you’re managing a team, you also grant access to team members. After you complete these steps, you or your team can start building AI applications using the deployed model.

This quickstart shows you how to create resources to build an agent with a basic setup. For more advanced scenarios that use your own resources, see Set up your environment for agent development.

Prerequisites

• An Azure account with an active subscription. If you don’t have one, create a free Azure account, which includes a free trial subscription.
• If you’re creating the project for yourself:
  • Access to a role that allows you to create a Foundry resource, such as Azure Account AI Owner or Azure AI Owner on the subscription or resource group. For more information about permissions, see Role-based access control for Microsoft Foundry.
• If you’re creating the project for a team:
  • Access to a role that allows you to complete role assignments, such as Owner. For more information about permissions, see Role-based access control for Microsoft Foundry.
  • A list of user email addresses or Microsoft Entra security group IDs for team members who need access.

Select your preferred method by using the following tabs:

Azure CLI

• Install the Azure CLI.

• Sign in to Azure:

  az login
  

Foundry portal

• Access to the Microsoft Foundry portal.

Create a project

Create a Foundry project to organize your work. The project contains models, agents, and other resources your team uses.

Azure CLI

1. Create a resource group or use an existing one. For example, create my-foundry-rg in eastus:

   az group create --name my-foundry-rg --location eastus
   

2. Create the Foundry resource. For example, create my-foundry-resource in the my-foundry-rg resource group:

   az cognitiveservices account create \
       --name my-foundry-resource \
       --resource-group my-foundry-rg \
       --kind AIServices \
       --sku s0 \
       --location eastus \
      --allow-project-management
   

   The --allow-project-management flag enables project creation within this resource.

3. Create a custom subdomain for the resource. The custom domain name must be globally unique. If my-foundry-resource is taken, try a more unique name.

   az cognitiveservices account update \
       --name my-foundry-resource \
       --resource-group my-foundry-rg \
       --custom-domain my-foundry-resource
   

4. Create the project. For example, create my-foundry-project in the my-foundry-resource:

   az cognitiveservices account project create \
       --name my-foundry-resource \
       --resource-group my-foundry-rg \
       --project-name my-foundry-project \
       --location eastus
   

5. Verify the project was created:

   az cognitiveservices account project show \
       --name my-foundry-resource \
       --resource-group my-foundry-rg \
       --project-name my-foundry-project
   

   The output displays the project properties, including its resource ID.

Reference: az cognitiveservices account

Foundry portal

1. Go to Microsoft Foundry.
2. Sign in with your Azure account.
3. Select the project name in the upper-left corner, and then select Create new project.
4. Enter a project name, such as my-foundry-project.
5. Select Advanced options to configure the resource group and location:
   • Resource group: Create a new resource group or select an existing one. If you create a new resource group, you can more easily manage the project and all its resources together.
   • Location: Select the region closest to your team.
6. Select Create project.

Deploy a model

Deploy a model that you can use. This example uses gpt-4.1-mini, but you can choose any available model.

Azure CLI

az cognitiveservices account deployment create \
    --name my-foundry-resource \
    --resource-group my-foundry-rg \
    --deployment-name gpt-4.1-mini \
    --model-name gpt-4.1-mini \
    --model-version "2025-04-14" \
    --model-format OpenAI \
    --sku-capacity 10 \
    --sku-name Standard

Verify the deployment succeeded:

az cognitiveservices account deployment show \
    --name my-foundry-resource \
    --resource-group my-foundry-rg \
    --deployment-name gpt-4.1-mini

When the deployment is ready, the output shows "provisioningState": "Succeeded".

Reference: az cognitiveservices account deployment

Foundry portal

1. In your project, select Discover in the upper-right navigation.
2. Select Models.
3. Search for gpt-4.1-mini.
4. Select Deploy > Default settings to add it to your project.
5. Note the deployment name (for example, gpt-4.1-mini). Your team needs this name to use the model.

Get your project connection details

You need the following information to connect to the project in other quickstarts and tutorials.

If you’re administering this project for others, send them this information.

• Sign in to Microsoft Foundry by using your Azure account. Select your project to start building.
• Find your project endpoint on the welcome screen of the project.

• Get started with Microsoft Foundry quickstart.

For administrators - grant access

If you’re administering a team, assign the Azure AI User role to team members so they can use the project and deployed models. This role provides the minimum permissions needed to build and test AI applications.

Azure CLI

1. Get the project’s resource ID:

   PROJECT_ID=$(az cognitiveservices account project show \
     --name my-foundry-resource \
     --resource-group my-foundry-rg \
     --project-name my-foundry-project \
     --query id -o tsv)
   

2. Assign the Azure AI User role to a team member:

   az role assignment create \
       --role "Azure AI User" \
       --assignee "[e-mail]" \
       --scope $PROJECT_ID
   

   To add a security group instead of an individual user:

   az role assignment create \
       --role "Azure AI User" \
       --assignee-object-id "<security-group-object-id>" \
       --assignee-principal-type Group \
       --scope $PROJECT_ID
   

3. Verify the role assignment:

   az role assignment list \
       --scope $PROJECT_ID \
       --role "Azure AI User" \
       --output table
   

Reference: az role assignment

Foundry portal

1. In the Foundry portal, select Operate in the upper-right navigation.
2. Select Admin in the left pane.
3. Select your project name in the table.
4. Select Add user in the upper right.
5. Enter the email address of the team member.
6. Select Add.

Repeat these steps for each team member or security group.

To add multiple users at once, use a Microsoft Entra security group instead of individual email addresses.

Verify team member access

Ask a team member to verify their access by signing in to Microsoft Foundry, selecting the project from the project list, and confirming the deployed model appears under Build > Models.

If the team member can’t access the project, verify that the role assignment completed successfully. Check that you used the correct email address or security group ID. Make sure the team member’s Azure account is in the same Microsoft Entra tenant.

Clean up resources

When you no longer want this project, delete the resource group to delete all resources associated with it.

Azure CLI

az group delete --name my-foundry-rg --yes --no-wait

Foundry portal

In the Azure portal, find and select your resource group. Select Delete and confirm to delete the resource group and all its associated resources.

Next step

Microsoft Foundry quickstart