Built-in role combining control plane and data plane rights, so its holders can stand up resources and projects, look after models and also build within projects; it is among the most privileged Foundry roles.
Also called Azure AI Owner, Azure AI Owner.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Foundry Owner in context, with comparison tables and the common traps.
Terms in this definition
- Role
How an actor normally or expectedly behaves, or the part a person takes in a process. A single actor may hold more than one role.
- Control plane
Management layer used to create, configure and remove resources, as distinct from the data plane where they are used. Azure Resource Manager fills this role for Azure, and in AKS Azure operates the Kubernetes control plane on your behalf.
- Data plane
Operations that act on what is inside a resource, for example the secrets, keys and certificates held in a vault; in Key Vault these are authorised through data roles or access policies and filtered by the Key Vault firewall.
Related terms
- Azure AI Administrator
Built-in role meant for Azure Machine Learning and Foundry hubs only, where it holds every control plane permission over Azure AI and the services it relies on. Today's Foundry resources are governed by Foundry Owner or Foundry Account Owner instead.
- Azure AI Developer
Built-in role scoped to an Azure Machine Learning workspace or hub: holders can do anything inside it except administer the workspace itself. For Foundry projects, the equivalent roles are Foundry Owner and Foundry User.