User access to all levels of files within a container

Question

Hi, I am trying to grant access to read, write, and rename and delete for all the files and folders within a container. But when I do that in explorer when right click the container and manage ACl, the user can only work with the container level, then with every level of the child folders, I have to do the same thing. Do you have any suggestion?

Answer 1

Hello Jessica,

Thank you for posting your query here!

You can set the desired permissions at the container level using Azure Portal or Azure Storage Explorer. These permissions are inherited by all blobs (files) and virtual directories (folders) within the container.

To grant access to a container, you can assign an RBAC role at the container scope or above to a user, group, service principal, or managed identity. You may also choose to add one or more conditions to the role assignment.
You can read about the assignment of roles at Assign Azure roles using the Azure portal.

Also, folders in the Azure Blob storage are virtual. They look like folders, but they are not real folders just like the folders on your local computer.

If you need to grant access on folder level, you need to use Azure Data Lake Gen2 i.e. Azure Storage account where Hierarchical namespace setting is enabled.
For existing storage account blob container/ folder: Access control lists (ACLs) in Azure Data Lake Storage Gen2

For more fine-grained control, you can set ACLs at the individual blob (file) level.

Navigate to the specific blob, and in the Azure Portal or Azure Storage Explorer, set the access controls for that specific blob (This can be more granular but might not be practical for a large number of files).

Additional information: Authorizing access to Azure Storage

Please let us know if you have any further queries. I’m happy to assist you further.

---

Please do not forget to "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.