User Managed Identity Access Issues to Storage Account

Question

User Managed Identity Access Issues to Storage Account

P_And8852 1

Hello all,

We've created a User assigned managed identity in Azure to access storage containers under a Data Lake storage account resource.

The issue we're running into is that the the Managed Identity doesn't have access to the containers despite having several areas in Azure where it has been given the proper roles/ACL access.

For example,

At the Storage Account level, the UAMI has "Storage Blob Data Contributor"
In and individual storage container, the UAMI has R/W/E permissions on the ACL

I'm not sure where else the UAMI needs security allotments to access the containers, but when we run a logic app it gets a forbidden "This request is not authorized to perform this action"

SaiKishor-MSFT 17,336 Reputation points

2022-11-01T21:04:59.48+00:00

@P_And8852 Thanks for reaching out to Microsoft Q&A. Can you confirm if the logic app has been given access to the Storage service as well?
P_And8852 1 Reputation point

2022-11-02T14:52:03.157+00:00

Hello and thank you for your response.

The strange thing is the logic app in question that's having access details is cloned from a logic app that does have access. So the settings for those resources are the same.
SaiKishor-MSFT 17,336 Reputation points

2022-11-04T19:22:14.933+00:00

@P_And8852 Can you let me know what kind of access the containers have? Do they have anonymous access or private access and how do you access it? Thanks.
SaiKishor-MSFT 17,336 Reputation points

2022-11-10T20:55:25.157+00:00

@P_And8852 Any update?

1 answer

Your answer

SaiKishor-MSFT 17,336 Reputation points

2022-11-01T21:04:59.48+00:00

@P_And8852 Thanks for reaching out to Microsoft Q&A. Can you confirm if the logic app has been given access to the Storage service as well?
P_And8852 1 Reputation point

2022-11-02T14:52:03.157+00:00

Hello and thank you for your response.

The strange thing is the logic app in question that's having access details is cloned from a logic app that does have access. So the settings for those resources are the same.
SaiKishor-MSFT 17,336 Reputation points

2022-11-04T19:22:14.933+00:00

@P_And8852 Can you let me know what kind of access the containers have? Do they have anonymous access or private access and how do you access it? Thanks.
SaiKishor-MSFT 17,336 Reputation points

2022-11-10T20:55:25.157+00:00

@P_And8852 Any update?

Answer 1

Bhatt, Ramachandra 0

Hi Team,

even I face similar issue, I have an java app deployed as Spring boot app in App Service and is trying to access a storage account using user defined managed identity as auth, but it always throws 403 with error the server returned an error message that says 'Signature did not match'. Not sure what is the issue.

Share via

User Managed Identity Access Issues to Storage Account

1 answer

Your answer