This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(176, 78%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EO%3C/text%3E%3C/svg%3E)
Hi,
I have azure subscription and have created one storage account as well. I am the default administrator of the subscription and storage account as well.
I am considering to create another user account with limited access to resources, for example, can read only but can't make changes or deletion. And similarly, when this use access the File Share, they should be able to see the files but should not be able to delete or modify the records.
Does it require changing the permissions for the file share under Azure Storage Account? If possible, I don't want to modify the Storage permissions, but create a user account with limited access.
Any step by step instructions /document will be appreciated.
An Azure service that offers file shares in the cloud.
Globally unique resources that provide access to data management services and serve as the parent namespace for the services.
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
Answer accepted by question author
Permissions are applied to a resource, not a user, so you will need to apply the appriopriate permissions to your storage account for your required user. For example, the "storage blob data reader" permission will give you read only access to blob data. You would assign this role to your second user on this storage account.
Hi,
This means there is no need to have multiple storage accounts... correct me if wrong here.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(48, 36%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESM%3C/text%3E%3C/svg%3E)
@~OSD~ Yes, that is right. Please refer to this document for more details- https://learn.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal?tabs=current
Please let us know if you have any more questions and we will be glad to assist you further. Thank you!
Remember:
Please accept an answer if correct. Original posters help the community find answers faster by identifying the correct answer. Here is how.
Want a reminder to come back and check responses? Here is how to subscribe to a notification.