Question

Your organization has an Azure AI Foundry hub that centralizes an Azure OpenAI connection, an Azure AI Search connection, and a storage account. Three separate teams each need their own isolated Foundry project for developing distinct GenAI applications, but all three teams must reuse the same Azure OpenAI connection defined at the hub without redefining credentials in each project. What is the most appropriate way to structure this so that connections are inherited while keeping project-level work isolated?

Accepted Answer

Create three projects under the shared hub; hub-level connections are automatically available to all projects, while each project maintains its own isolated assets and access boundaries.

Answer

Create three separate hubs, each with its own duplicate Azure OpenAI connection, and link them together with a connection group.

Answer

Create a single project and use folders inside it to separate each team's work, since connections cannot be shared across multiple projects.

Answer

Define the Azure OpenAI connection at the project scope in the first project and grant the other two projects Reader access to that project's resources.