AI-103 Practice Question 81: Bing Grounding Connection Setup
Microsoft Azure AI Apps and Agents Developer Associate (AI-103) · Test 9 · question 1 of 10
A team is building a prompt agent in Foundry Agent Service that must ground its answers in live public web results and return the bing_grounding tool's source citations for a compliance audit trail. The team has already provisioned and paid for a dedicated Grounding with Bing Search resource for this purpose. A developer holding only the Foundry User role on the project tries to add that resource as a project connection so the agent can reference it, but the Foundry portal blocks the action.
What should the team do to get the connection created and usable by the agent?
Show answer and explanation
Answer:
Microsoft's prerequisites for Grounding with Bing Search split the work by role: Contributor on the resource group is needed only to provision the Bing resource and read its keys, while Foundry Project Manager on the Foundry project is the role required to create project connections. Foundry User is enough to build and run agents but doesn't include that permission, which is exactly why the developer's attempt was blocked. Once the connection exists, SDK samples resolve it by connection name (BING_PROJECT_CONNECTION_NAME) and REST samples use its full connection ID, either of which is passed into the bing_grounding tool's search configuration.
- A is wrong because General Web Search is a real, simpler alternative for basic live-web answers, but it doesn't use the resource the team already provisioned, and it doesn't produce the bing_grounding tool's citation output the compliance audit trail depends on. - B is wrong because Foundry Agent Consumer is the least-privilege role for *invoking* an agent's endpoint. It carries no data-plane or management permission to create project connections. - C is wrong because Contributor on the Bing resource is the role for provisioning that resource and retrieving its keys, a step the team already completed. It has nothing to do with the missing permission, which is on the Foundry *project*, not the Bing resource.
Reference: Use Grounding with Bing Search tools with the agents API