Change access level of $logs in Azure storage container

Question

Hi,

I'm unable to change the access level of $logs in Azure storage container.
It says "Failed to change access level for 1 out of 1 container(s):
$logs: The account being accessed does not have sufficient permissions to execute this operation."

I already have user access administrator role at the subscription level and contributor access at resource group level.

Please let me know if I'm missing on any additional permission.

Thanks.

Answer 1

@robcool Welcome to Microsoft Q&A Forum, Thank you for posting your query here!

May I know, how are you trying to change the access level of "$log" folder (Portal, or Storage Explorer tool) ?
Can you please share the screen shot of the error message? Please try to change the access level through storage explorer tool and let me know the status

All logs are stored in block blobs in a container named $logs, which is automatically created when Storage Analytics is enabled for a storage account. The $logs container is located in the blob namespace of the storage account, for example: http://<accountname>.blob.core.windows.net/$logs. This container cannot be deleted once Storage Analytics has been enabled, though its contents can be deleted. If you use your storage-browsing tool to navigate to the container directly, you will see all the blobs that contain your logging data.

Assign an Azure role to access blob data

Reference: https://learn.microsoft.com/en-us/azure/storage/common/storage-analytics-logging?tabs=dotnet#how-logs-are-stored

Please let us know if you have any further queries. I’m happy to assist you further.

----------

Please do not forget to "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.