How to access to Azure BLOB Strage from Azure Functions(Python) using MSAL?

Question

How to access to Azure BLOB Strage from Azure Functions(Python) using MSAL?

Makoto Oda 296

I posted the same question to GitHub issue.

I want to let Azure Function to authenticate by Azure Active Directory.

I cannot understand how to access to Azure BLOB Storage from Azure Functions using MSAL.
How do I configure scope and endpoint ?

MughundhanRaveendran-MSFT 12,511 Reputation points

2022-12-20T06:19:28.703+00:00

the details are already mentioned in the file

"endpoint": "https://graph.microsoft.com/v1.0/users"

"scope": ["https://graph.microsoft.com/.default"],
// Specific to Client Credentials Grant i.e. acquire_token_for_client(),
// you don't specify, in the code, the individual scopes you want to access.
// Instead, you statically declared them when registering your application.
// Therefore the only possible scope is "resource/.default"
// (here "https://graph.microsoft.com/.default")
// which means "the static permissions defined in the application".

1 answer

Your answer

MughundhanRaveendran-MSFT 12,511 Reputation points

2022-12-20T06:19:28.703+00:00

the details are already mentioned in the file

"endpoint": "https://graph.microsoft.com/v1.0/users"

"scope": ["https://graph.microsoft.com/.default"],
// Specific to Client Credentials Grant i.e. acquire_token_for_client(),
// you don't specify, in the code, the individual scopes you want to access.
// Instead, you statically declared them when registering your application.
// Therefore the only possible scope is "resource/.default"
// (here "https://graph.microsoft.com/.default")
// which means "the static permissions defined in the application".

Answer 1

Umang Middha 555

Hello Makoto,

Hope you are doing well today. To access Azure Blob Storage from Azure Functions using MSAL, you need to follow these steps:

Register an Azure Active Directory application: Go to the Azure portal and register a new Azure AD application. This will give you the necessary client ID and tenant ID to configure MSAL.
Configure MSAL: In your Azure Functions code, use the MSAL library to authenticate with Azure AD and obtain an access token. You can configure the scope and endpoint.

Use the access token: Once you have the access token, you can use it to authenticate with Azure Blob Storage and perform operations like reading or writing data.

Please let me know if you want any assistance with the same.

Regards,

Umang Middha

******@outlook.com

Makoto Oda 296 Reputation points

2023-02-01T00:20:08.76+00:00
Umang, Thank you for your answer.

I do not know what I should configure the scope and endpoint.

And, I think that if RBAC for a Azure Function App is configured properly, I can use azure.identity.DefaultAzureCredential not MSAL as follows.

What is the case that we need to use MSAL while RBAC is available and configured properly?

from azure.identity import DefaultAzureCredential from azure.storage.blob import ContainerClient class SampleClass: def __init__(self): self.__container_client = ContainerClient( account_url="https://<storage account name>.blob.core.windows.net", container_name="<container name>", credential=DefaultAzureCredential(), )

Share via

How to access to Azure BLOB Strage from Azure Functions(Python) using MSAL?

1 answer

Your answer