How can I create a SAS token that would allow to add, modify and delete files on a specific container BUT would prevent to download files?

Question

I tried with AWDL permissions that indeed allowed user to add files and prevented them to download BUT it did not allow to delete files that may have been potentially and accidentally saved. Why Delete permission did not work and failed with Insufficient Privileges' message?

Answer 1

@Pasquale Gagliano
I have tested and found the same from my side. I believe this is a bug with AzCopy and have opened an issue with the service team. You can track the issue here.

I found that the equivalent CLI commands with the same token. As a workaround you can use this command:

az storage blob delete -c containername -n blobname --account-name name --sas-token "?sv=2020-04-08&st=2021-09-14T22%3A35%3A28Z&se=2021-09-15T22%3A35%3A28Z&sr=c&sp=wdl&sig=REDACTED"  

Hope this helps. I will track the GitHub issue and provide any updates when they become available.