PDF viewer access denied

[MichaelSHits]

Hi,

I’m running into another issue with the Azure RAG .NET demo. When I click on a citation link in the UI to open the PDF viewer, the viewer opens but shows an “Access Denied” error.

The PDFs do exist in the blob storage and were uploaded successfully.

Is this related to:

SAS token generation

Blob container access level

Managed Identity / RBAC permissions

A missing configuration in the backend or frontend?

Any guidance on how the citation URLs are generated and what permissions are required would be appreciated.