I cannot delete from Azure blob storage even though I've applied the correct role (Storage Blob Data Contributor).

Faneca, Kevin 0 Reputation points
2023-10-17T15:33:31.4033333+00:00

I have applied the Storage Data Contributor role but I cannot delete anything from an Azure blob storage. I get a 403 and Azure complains that I don't have authorization to perform 'Microsoft.Storage/storageAccounts/listKeys/action`. But that permission looks like it sits on Storage Blob Data Owner role. Storage Data Contributor role explicitly says I should be able to delete blobs.

Azure Blob Storage
Azure Blob Storage
An Azure service that stores unstructured data in the cloud as blobs.
3,192 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Sam Cogan 10,812 Reputation points Microsoft Employee Volunteer Moderator
    2023-10-17T16:30:57.8366667+00:00

    Storage Blob Data Contributor will allow you to delete records, but you also need to be able to connect to the storage account, which requires the list keys permission, so you also need to be granted the Storage Account Contributor role (notice the missing "data" in the name, this is a different role).


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.