Troubleshooting: Bonsai resource provisioning

Solve common problems related to Bonsai resources provisioning.

I cannot create a Bonsai workspace

Problem

When creating a Bonsai workspace in the Azure portal, you get one of the following errors:

You do not have permissions to create resource groups under subscription YOUR_SUBSCRIPTION

or

You do not have permissions to create resources under subscription YOUR_SUBSCRIPTION

Cause

Bonsai workspace creation requires a one time registration of the Bonsai service in the target subscription. The registration step requires Contributor access at the subscription level.

Solution

Work with your IT administrator to create a Bonsai workspace on your behalf OR assign the necessary permissions to your account for the Bonsai service under your Azure subscription.

IT administrators can assign permissions specifically to the Bonsai service using the Microsoft.AutonomousSystems namespace and the Azure CLI:

az login

az provider register             \
  --subscription SUBSCRIPTION_ID \
  --namespace 'Microsoft.AutonomousSystems'

I cannot create a Bonsai workspace in regions other than WestUS or WestUS2

Problem

When creating a Bonsai workspace in the Azure portal, your preferred region is unavailable in the Location drop down.

Cause

Currently, Bonsai is only available in the WestUS and WestUS2 regions. If your provisioning fails, your IT Azure policy likely does not authorize resources or and resource groups in the supported regions.

Solution

Work with your IT administrator to allow one of the supported regions (WestUS or WestUS2) for resource and resource group creation (two Azure policies). Alternatively, submit feedback for additional region support.

I can log into Bonsai but cannot use the workspace

Problem

Your Bonsai workspace was provisioned correctly but you cannot train or export a brain after logging in.

Cause

When a Bonsai workspace is created, it is associated with two resource groups:

  • a hosting resource group that existed previously or was created during the provisioning process.
  • a provisioned resource group created along with the Bonsai workspace.

To train and export brains, you must have [Contributor]/azure/role-based-access-control/built-in-roles) level access to both resource groups.

Solution

  1. Confirm the names of your resources groups under the [Account settings]((https://preview.bons.ai/accounts/settings) section of the Bonsai UI.
  2. Work with your IT administrator to ensure your account has Contributor level access to both resource groups.