The Cognitive Services User lets you read and list keys of Cognitive Services.
References:
https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles

LUIS includes a set of prebuilt entities for recognizing common types of information, like dates, times, numbers, measurements, and currency. Prebuilt entity support varies by the culture of your LUIS app.
Note: LUIS provides three types of prebuilt models. Each model can be added to your app at any time.
Model type: Includes
* Domain: Intents, utterances, entities
* Intents: Intents, utterances
* Entities: Entities only
References:
https://docs.microsoft.com/en-us/azure/cognitive-services/luis/luis-concept-prebuilt-model

When an application needs access to deploy or configure resources through Azure Resource Manager in Azure Stack, you create a service principal, which is a credential for your application. You can then delegate only the necessary permissions to that service principal.
References:
https://docs.microsoft.com/en-us/azure/azure-stack/azure-stack-create-service-principals
Topic 1, Contoso Case Study
Overview
Contoso. Ltd. has an office in New York to serve its North American customers and an office in Paris to serve its European customers.
Existing Environment
Contoso. Ltd. has an office in New York to serve its North American customers and an office in Paris to serve its European customers.
Infrastructure
Each office has a small data center that hosts Active Directory services and a few off-the-shelf software solutions used by internal users.
The network contains a single Active Directory forest that contains a single domain named contoso.com. Azure Active Directory (Azure AD) Connect is used to extend identity management to Azure.
The company has an Azure subscription. Each office has an Azure ExpressRoute connection to the subscription. The New York office connects to a virtual network hosted in the US East 2 Azure region. The Paris office connects to a virtual network hosted in the West Europe Azure region.
The New York office has an Azure Stack Development Kit (ASDK) deployment that is used for development and testing.
Current Business Model
Contoso has a web app named Bookings hosted in an App Service Environment (ASE). The ASE is in the virtual network in the East US 2 region. Contoso employees and customers use Bookings to reserve hotel rooms.
Data Environment
Bookings connects to a Microsoft SQL Server database named hotelDB in the New York office.
The database has a view named vwAvailability that consolidates columns from three tables named Hotels, Rooms, and RoomAvailability. The database contains data that was collected during the last 20 years.
Problem Statements
Contoso identifies the following issues with its current business model:
* European users report that access to Bookings is slow, and they lose customers who must wait on the phone while they search for available rooms.
* Users report that Bookings was unavailable during an outage in the New York data center for more than 24 hours.
Requirements
Contoso identifies the following issues with its current business model:
* European users report that access to Bookings is slow, and they lose customers who must wait on the phone while they search for available rooms.
Business Goals
* Users report that Bookings was unavailable during an outage in the New York data center for more than 24 hours.
Contoso wants to provide a new version of the Bookings app that will provide a highly available, reliable service for booking travel packages by interacting with a chatbot named Butler.
Contoso plans to move all production workloads to the cloud.
Technical Requirements
Contoso identifies the following technical requirements:
* Data scientists must test Butler by using ASDK.
* Whenever possible, solutions must minimize costs.
* Butler must greet users by name when they first connect.
* Butler must be able to handle up to 10.000 messages a day.
* Butler must recognize the users' intent based on basic utterances.
* All configurations to the Azure Bot Service must be logged centrally.
* Whenever possible, solutions must use the principle of least privilege.
* Internal users must be able to access Butler by using Microsoft Skype for Business.
* The new Bookings app must provide a user interface where users can interact with Butler.
* Users in an Azure AD group named KeyManagers must be able to manage keys for all Azure Cognitive Services.
* Butler must provide users with the ability to reserve a room, cancel a reservation, and view existing reservations.
* The new Bookings app must be available to users in North America and Europe if a single data center or Azure region fails.
* For continuous improvement, you must be able to test Butler by sending sample utterances and comparing the chatbot's responses to the actua intent.