Do you have CLI can change ADLS 2's directory owning user?

Question

Do you have CLI can change ADLS 2's directory owning user?

JH 5

I saw we can use Azure Storage Explorer to change the owner of a directory or a file.
https://learn.microsoft.com/en-us/azure/storage/blobs/data-lake-storage-explorer-acl#manage-an-acl

However, I cannot find the same operation in other ways which includes CLI, python, or PowerShell. Others only provide a way to add new entries instead of changing the owner.

PRADEEPCHEEKATLA 91,861 Reputation points

2023-06-19T04:25:03.1+00:00

@JH - Just checking in to see if the below answer helped. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
Hagan, David 0 Reputation points

2023-10-10T20:20:13.3533333+00:00

I have a similar, if not the same issue. The articles listed show how to change the ACLs the user, the group and the owner have set for them, but I, and I suspect the OP, wish to find a programmatic way to change the owning group name. I.e., upon creation the owning group is set to the service principal that created the container. This needs to be changed to the group that has the identities for the function app that will actually write to the container. The instructions in the articles detail adding a new entry to the ACL that you may apply to a group, and we are doing that - my function app identity has an entry with rwx, but without the owning group, the file owner becomes the identity that writes the file, and sometimes that function app is changed and then we must recursively apply the ACE/ACLs all over
Hagan, David 0 Reputation points

2023-10-11T14:20:23.3033333+00:00

the only thing I have found, so maybe I'll mix powershell and az cli, is this: https://learn.microsoft.com/en-us/cli/azure/storage/fs/access?view=azure-cli-latest

1 answer

Your answer

PRADEEPCHEEKATLA 91,861 Reputation points

2023-06-19T04:25:03.1+00:00

@JH - Just checking in to see if the below answer helped. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
Hagan, David 0 Reputation points

2023-10-10T20:20:13.3533333+00:00

I have a similar, if not the same issue. The articles listed show how to change the ACLs the user, the group and the owner have set for them, but I, and I suspect the OP, wish to find a programmatic way to change the owning group name. I.e., upon creation the owning group is set to the service principal that created the container. This needs to be changed to the group that has the identities for the function app that will actually write to the container. The instructions in the articles detail adding a new entry to the ACL that you may apply to a group, and we are doing that - my function app identity has an entry with rwx, but without the owning group, the file owner becomes the identity that writes the file, and sometimes that function app is changed and then we must recursively apply the ACE/ACLs all over
Hagan, David 0 Reputation points

2023-10-11T14:20:23.3033333+00:00

the only thing I have found, so maybe I'll mix powershell and az cli, is this: https://learn.microsoft.com/en-us/cli/azure/storage/fs/access?view=azure-cli-latest

Answer 1

@JH - Thanks for the question and using MS Q&A platform.

According to this article: Access control lists (ACLs) in Azure Data Lake Storage Gen2 - To set file and directory level permissions, see any of the following articles:

User's image

Yes, you can use Azure CLI to change the owning user of a directory in Azure Data Lake Storage Gen2. You can use the az storage fs access set command to update the owning user and group of a directory or file by setting the --owner or group parameters to the entity ID or User Principal Name (UPN) of a user.

Here is an example command to change the owner of a directory.

az storage fs access set --acl "user::rw-,group::rw-,other::-wx" -p my-directory -f my-file-system --account-name mystorageaccount --auth-mode login

Hope this helps. Do let us know if you any further queries.

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.

PRADEEPCHEEKATLA 91,861 Reputation points

2023-06-22T05:47:30.66+00:00

@JH - Following up to see if the above answer was helpful. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.

Share via

Do you have CLI can change ADLS 2's directory owning user?

1 answer

Your answer