Restrict access to a specific container in a Azure Storage BLOB to specific tenant (Azure AD)

Adit Shah 6 Reputation points
2020-11-18T12:54:58.563+00:00

We are thinking to create a web application which will allow login to multiple organizations users (multi-tenant)

Logged in users will be able to upload files, so we are going to upload those files to Azure blob storage.

We are planning to keep a separate container for each organization (tenant) in same storage account.

So is there any way to authenticate & restrict organization user to a specific container?

Any custom authentication/authorization? Please suggest.

Azure Files
Azure Files
An Azure service that offers file shares in the cloud.
1,167 questions
Azure Storage Accounts
Azure Storage Accounts
Globally unique resources that provide access to data management services and serve as the parent namespace for the services.
2,712 questions
Azure Blob Storage
Azure Blob Storage
An Azure service that stores unstructured data in the cloud as blobs.
2,436 questions
Azure Disk Storage
Azure Disk Storage
A high-performance, durable block storage designed to be used with Azure Virtual Machines and Azure VMware Solution.
572 questions

6 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anil Nagthane 0 Reputation points
    2024-01-02T14:59:19.1933333+00:00

    There is no feature available in Azure Storage account to show only restricted containers. You will have to at least give reader permission on storage account and then you can control individual container's read, write and execute permission. Reader permission on storage account by default give read permission on all containers. Hope this helps.

    0 comments