Thank you for reaching out.
If I understand it correctly one of your team members with the Reader and Data Access role on a storage account is unable to see anything, while others with the same role can. To address this issue, you can follow these steps:
- Can you ask the team member to check if they have logged into the portal with the correct account?
- This can be a browser cache issue; can you ask them to clear browser cache and try logging in again to see if this resolves the issue? Trying another browser here can help as well.
- Lastly, can you ask them to access the access the storage account using PowerShell and see if they observe any errors. They can run these commands to check read access to blobs.
Connect-AzAccount
$StorageAccount = Get-AzStorageAccount -ResourceGroupName "<RG>" -Name "<Storage account name>"
Get-AzRmStorageContainer -ResourceGroupName "<RG>" -AccountName "<Storage account name>"
$ContainerName = "<enter a container name>"
$Context = $StorageAccount.Context
Get-AzStorageBlob -Container $ContainerName -Context $Context | Select-Object -Property Name
Get-AzStorageBlobContent -Container $ContainerName -Blob "<enter an blob name>" -Context $Context -Destination "<enter a destination address>"
Additional reference : https://learn.microsoft.com/en-us/azure/storage/blobs/assign-azure-role-data-access?tabs=portal#assign-an-azure-role
Please let us know if you have any questions. Thank you!