An Azure search service with built-in artificial intelligence capabilities that enrich information to help identify and explore relevant content at scale.
Hi Yogesh Dhavale (LTIMindtree Limited),
The AI Search connection uses key-based (API key) authentication while the search service is on a private network — that combination isn't supported for the agent tool, so the agent runtime can't resolve the private host (hence "DNS returned no data").
Fix:
- In your Foundry project, open the Azure AI Search connection the agent uses and switch its auth from API key to Microsoft Entra – project managed identity (keyless).
- Grant the Foundry project's managed identity these roles on the search service: Search Index Data Contributor and Search Service Contributor.
- Because the service is private, also confirm the network path: a private endpoint on the search service, with the
privatelink.search.windows.netPrivate DNS zone linked to the VNet your agent runtime uses (an unlinked/missing DNS zone is literally what produces "DNS returned no data"), and that your Foundry Agent Service is network-secured / VNet-injected to reach it. A public-only agent can't reach a private-only search service regardless of auth. - Save the connection and re-run the agent in the playground.
If the error is actually a 401/403 ("tool can't access the index"), that's RBAC (assign the two roles above) or a disabled API key; if it's "index not found," check the index name (case-sensitive) and that the connection points to the right search resource; if you hit "Workspace not found" while creating the connection, use az cognitiveservices account project connection create (the older az ml path doesn't work with new Foundry projects).
Kindly let us know if the above helps or you need further assistance on this issue.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".