How to discover unused file permissions in Azure Files

Curtis Jackburn 20

Does Microsoft offer any solution to detect unused FILE permissions in Azure Files so that IT can take a least-privilege approach to file access? I had hoped that Entra Permissions Management would do this, but best I can tell it is more about detecting and limiting unnecessary IT admin permissions, and maybe app-level permissions. Doesn't mention anything about file permissions though.

KarishmaTiwari-MSFT 20,207 Reputation points Microsoft Employee

2024-04-17T22:26:52.18+00:00

@Curtis Jackburn This document should help: Configure directory and file-level permissions over SMB.
Let me know if you have any questions. Thanks.
Curtis Jackburn 20 Reputation points

2024-04-18T15:56:13.17+00:00

How would that help me find unused permissions?
KarishmaTiwari-MSFT 20,207 Reputation points Microsoft Employee

2024-04-18T20:00:07.75+00:00

Unfortunately, there is no straightforward way or a built-in feature at this point. The document above may help with the best practices to follow in addition to Marcin's alternate solutions in the answer below.

Accepted answer

Marcin Policht 25,675 Reputation points MVP

2024-04-17T23:08:19.38+00:00

Not natively. One option is to use third-party products, such as https://www.varonis.com/coverage/azure-files

Alternatively, you can develop your own solution by digging through the logs by following https://learn.microsoft.com/en-us/azure/storage/files/storage-files-monitoring

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin
Please sign in to rate this answer.
Curtis Jackburn 20 Reputation points

2024-04-18T18:42:42.85+00:00

Hah ... I was actually looking to get away from Varoni$. We're having a hard time justifying the cost for little more than this particular function. But you're right, it definitely will do this.

Marcin Policht 25,675 Reputation points MVP

2024-04-18T19:02:19.4033333+00:00

Yep - unfortunately the options appear to be rather limited at this point

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

How to discover unused file permissions in Azure Files

0 additional answers

Your answer