"Storage account - Container - Directory permissions for viewing for a single folder user."

Question

Good morning community, I'm seeking assistance. I want to grant permissions in a storage account so that an external user can only view a specific folder that I have hosted in a container.

But so far, I haven't been able to achieve it, as I've tried in all ways through a "Shared access signature", but it still allows me to see all the folders and their contents.

The folder "tercera" is contained within the folder named "carpeta 2".

I generate the access for that single folder:

"When I try to paste the URL, it throws the following error:"

"Hope you can help me. The main goal is to only share that folder with an external user and prevent them from accessing or seeing the rest of what's in the container. Thank you."

Answer 1

Based on the documentation, here is an example of a service SAS URI, showing the resource URI, the delimiter character ('?'), and the SAS token.

The delimiter character ('?') for the query string is not part of the SAS token. If you generate a SAS token from the portal, PowerShell, Azure CLI, or one of the Azure Storage SDKs, you may need to append the delimiter character to the resource URL.

Don't forget to follow the best practices using the SAS : https://learn.microsoft.com/en-us/azure/storage/common/storage-sas-overview#sas-token