CODEWITHSUNDEEP
azureazure-active-directoryazure-blob-storage
Ajan Balakumaran
Ajan Balakumaran

Reputation: 1649

Azure roles for Blob storage for specific set of permission

I need to grant AD users with minimum permission to do following activities using blob storage, what are the roles to be assigned.

  1. Access to a storage account with read/write/delete permission on all containers and blobs underneath in Azure Portal

  2. Ability to create SAS token.

Any help is much appreciated, thanks in advance

Upvotes: 0

Views: 1370

Answers (1)

Gaurav Mantri
Gaurav Mantri

Reputation: 136346

Access to a storage account with read/write/delete permission on all containers and blobs underneath in Azure Portal

For this Storage Blob Data Contributor role should be sufficient as it allows read/write/delete permissions to Blob storage resources.

Ability to create SAS token.

For this Storage Blob Delegator will be needed.

For a list of Azure built-in roles for blobs, please see here.

Upvotes: 2

Related Questions