Allowing Users access to Blob Storage

Question

I have users that need to get the files into an azure database and I am doing this via Azure Data Factory. Should I be giving users access to the blob storage via the Azure Portal so they are able to upload their files for this ADF.

Is that best practice or is there a better method so users can put their data somewhere without needing access to the portal - maybe the use of the Azure Storage Explorer application assuming they are allowed to install apps on their computer.

Is it acceptable to give any and all users who require access to the portal so they can go to the blob storage and upload the file.

Answer 1

@Binway Welcome to Microsoft Q&A, thank you for posting your here!!

Better way is to Create SAS tokens for your storage containers with desired permissions and share it with your users and User should install the Storage Explorer and connect to the Blob container with provided SAS tokens to upload the files.

Step:1 Create SAS tokens in the Azure portal.

Go to the Azure portal and navigate to your container (Your storage account → containers → your container)

1. Generate SAS from the drop-down menu.
2. Define Permissions by checking and/or clearing the appropriate check box:
   • Your target container or file must have designated read, create, write and list access to upload the files to the container.
3. Specify the signed key Start and Expiry times.
4. Review then select Generate SAS token and URL.
5. The Blob SAS token query string and Blob SAS URL will be displayed in the lower area of window.
6. Copy and paste the Blob SAS token and URL values in a secure location. They'll only be displayed once and cannot be retrieved once the window is closed.

Step:2 Connect to the blob container using the SAS url using Storage Explorer

1. In the Select Resource panel of the Connect to Azure Storage dialog, select the blob Container.
2. Select Shared access signature (SAS) and select Next.
3. Enter a display name for your connection and the SAS URI for the resource. Select Next.
4. Review your connection information in the Summary panel. If the connection information is correct, select Connect.

Hope it helps!!!

---

Please "Accept as Answer" if it helped so it can help others in community looking for help on similar topics.

Answer 2

To allow or disallow public access for a storage account in the Azure portal, follow these steps:

Navigate to your storage account in the Azure portal.

Locate the Configuration setting under Settings.

Set Blob public access to Enabled or Disabled.