Azure File Storage - Folder level permissions

Question

Hello!

We are looking to move data up into Azure Files to remove the need for one of our on premise file share servers. After taking a look at the permissions through IAM, it looks like these permissions are only applicable to the Azure File Storage container itself. Is there a way to set file level permissions?

We will be using the Microsoft Azure Storage Explorer application for uploading & downloading files to this resource, so we only want specific users to access specific folders that are hosted on this resource.

Answer 1

Hi @Dalton

Thank you for asking this question on the **Microsoft Q&A Platform. **

To achieve your requirement you need Enable on-premises AD DS authentication and authorization over SMB for Azure file shares

> Azure Files supports identity-based authentication for Windows file shares over Server Message Block (SMB) using the Kerberos authentication protocol through the following three methods: > - On-premises Active Directory Domain Services (AD DS) > - Azure Active Directory Domain Services (Azure AD DS) > - Azure Active Directory (Azure AD) Kerberos for hybrid user identities

And then you can Configure directory and file-level permissions over SMB

Hope this helps!

---

Accept Answer and Upvote, if any of the above helped, this thread can help others in the community looking for remediation for similar issues. NOTE: To answer you as quickly as possible, please mention me in your reply.