Add ACL to AzureFiles via a VM on the same RG

Question

Hi guys. I built out an RG with a test vm in it and hosted Azure Files there. I've created 3 file shares and are able to mount them on my work computer via VPN and with my user credentials, not shared access key. We are wanting to build out the access control list similar to normal file share permissions.

To set ACL's and new file share management based on EntraID, do I need a WinServer VM spun up with ADDS installed on it?
Referencing here:
https://learn.microsoft.com/en-us/azure/storage/files/storage-files-active-directory-overview

Answer 1

Hello Johnny,

Thank you for posting your query here!

You do not need a Windows Server VM with Active Directory Domain Services (AD DS) installed to set ACLs and manage file shares based on Azure Active Directory (AAD) for Azure Files. Azure Files supports Azure AD authentication directly, allowing you to manage access control at the file share level using Azure AD identities without the need for an on-premises AD DS server. The integration with Azure AD provides the capability to configure access control lists (ACLs) and file share permissions for Azure Files.

Once Azure Files is configured with Azure AD, you can manage access control at a granular level using Azure AD identities. Assign Azure AD users or groups to specific roles on the file share to control access.

Please let us know if you have any further queries. I’m happy to assist you further.

---

Please do not forget to "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.