Azure OpenAI (Microsoft Foundry) error
Azure OpenAI 403 Forbidden (network access denied): what it means and how to fix it
403 Forbidden (network access denied)Retry? Not statedLast verified 2 documented fixes1 source
What it means
The server understood the request but refuses to authorize it because the resource's network access controls blocked it. Unlike 401, credentials might be valid.
Causes
- Error message references network access, IP restriction, or private endpoint
- Recent changes to virtual network, firewall, or private endpoint settings
How to fix it
- Fix 1.
In the Azure portal, open the resource's Networking page and verify your client IP is in the allowed list if you use IP firewall rules.
- Fix 2.
If you use a private endpoint, verify DNS resolves to the private IP, and check that NSG rules on the subnet are not blocking traffic.
More Azure OpenAI errors
All 15 Azure OpenAI errors400 Bad RequestRetry? Not stated400 content_filterRetry? Not stated200 finish_reason: content_filterRetry? Not stated200 content_filter_error (The contents are not filtered)Retry? Not stated401 UnauthorizedRetry? Not stated403 Forbidden (resource has been temporarily blocked)Retry? Not stated404 Not FoundRetry? Not stated429 Too Many Requests (Rate limit is exceeded)Retry? Yes
HTTP 403 at other providers
Compare 403 across providers403 AccessDeniedExceptionRetry? NoAmazon Bedrock403 InvalidClientTokenIdRetry? Not statedAmazon Bedrock403 MPAgreementBeingCreatedRetry? YesAmazon Bedrock403 AWS Marketplace Agreement Failed within 15 minutesRetry? Not statedAmazon Bedrock403 AWS Marketplace Agreement Pending after 15 minutesRetry? YesAmazon Bedrock403 permission_errorRetry? Not statedAnthropic API403 permission_deniedRetry? NoGemini API403 PERMISSION_DENIEDRetry? NoGemini API403 ForbiddenRetry? Not statedGroq API403 ForbiddenRetry? Not statedMistral API403 Country, region, or territory not supportedRetry? Not statedOpenAI API403 PermissionDeniedErrorRetry? Not statedOpenAI API
FAQ
What does the Azure OpenAI error "403 Forbidden (network access denied)" mean?
The server understood the request but refuses to authorize it because the resource's network access controls blocked it. Unlike 401, credentials might be valid.
How do I fix Azure OpenAI "403 Forbidden (network access denied)"?
There are 2 documented fixes. Start with the first: In the Azure portal, open the resource's Networking page and verify your client IP is in the allowed list if you use IP firewall rules.
Should I retry Azure OpenAI "403 Forbidden (network access denied)"?
Not stated. The official docs do not say whether this error is retryable.
Which other AI APIs return HTTP 403?
Per their official error docs: Amazon Bedrock (403 AccessDeniedException; 403 InvalidClientTokenId; 403 MPAgreementBeingCreated; 403 AWS Marketplace Agreement Failed within 15 minutes; 403 AWS Marketplace Agreement Pending after 15 minutes), Anthropic API (403 permission_error), Gemini API (403 permission_denied; 403 PERMISSION_DENIED), Groq API (403 Forbidden), Mistral API (403 Forbidden), OpenAI API (403 Country, region, or territory not supported; 403 PermissionDeniedError), OpenRouter (403 permission_denied; 403 Budget limit exceeded; 403 content_policy_violation; 403 refusal), Vertex AI (403 PERMISSION_DENIED), xAI API (403 Forbidden).
Sources
Last verified against 1 source: Azure OpenAI's official docs and official SDK repositories.
Newsletter
Know when the APIs change
One email per week. New model releases, API changes, what broke, and how developers are working around it.