The Cognitive Services OpenAI User role provides read-only access to the Azure OpenAI resource, allowing User1 to: Identify resource endpoints View available models for deployment Generate text and images using deployed models This role follows the principle of least privilege by granting only the permissions needed to view and interact with deployed models, without allowing management or configuration changes.