Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Azure blob storage and container permissions

I have one Azure storage account with several containers, where I have some guest users who will be logging into the portal, but they should have read/write access to the specific containers. These guest users should not have delete permissions.

I have gone through so many articles but never succeed.

Is there any way where I can achieve this?

like image 571
akshay vithalkar Avatar asked Aug 01 '18 09:08

akshay vithalkar


People also ask

How do I give access to the blob container in Azure?

To update the public access level for one or more existing containers in the Azure portal, follow these steps: Navigate to your storage account overview in the Azure portal. Under Data storage on the menu blade, select Blob containers. Select the containers for which you want to set the public access level.

What is difference between blob and container in Azure?

A container organizes a set of blobs, similar to a directory in a file system. A storage account can include an unlimited number of containers, and a container can store an unlimited number of blobs.

What is the type of permission that needs to be used for the Azure storage API?

Active Directory (AD) authorization for Azure Files. Azure Files supports identity-based authorization over SMB through AD. Your AD domain service can be hosted on on-premises machines or in Azure VMs. SMB access to Files is supported using AD credentials from domain joined machines, either on-premises or in Azure.

What are different access tiers for your Blob storage?

Azure offers three storage tiers to store data in blob storage: Hot Access tier, Cool Access tier, and Archive tier.


1 Answers

To give a specific container permission, you can do this followings:

Find your container, select Access Policy under the settings blade, and click Add Policy. Select the permissions which you want to give this specific container. Also, public access level is container level.

enter image description here

You can get more details from Manage anonymous read access to containers and blobs

In addition, there is a preview version of managing access rights to Azure storage account with RBAC roles. For the container scope, assign the Storage Blob Data Reader (Preview) role to a user. But it is intended for non-production use only.

like image 86
Nancy Xiong Avatar answered Oct 21 '22 20:10

Nancy Xiong