Resolving AllowedCopyScopeAuthorizationFailure in Azure Storage Container

Question

Why am I encountering an AllowedCopyScopeAuthorizationFailure error when trying to copy blobs between storage accounts in Azure?
 "PS - Based on common issues that we have seen from customers and other sources, we are posting these questions to help the Azure community."

Answer 1

Greetings!

The AllowedCopyScopeAuthorizationFailure error occurs when the permitted scope for copy operations in your Azure storage account is set to Private link, and the conditions for this setting are not met. Specifically, for the copy operation to succeed, both the source and destination storage accounts must have private links configured to the same virtual network. If these conditions are not met, a 403 Forbidden error is returned because the operation violates the permitted scope.

In your case, the error was caused by the configuration of the AllowedCopyScope feature. To resolve this issue, you can either ensure that both storage accounts have private links configured to the same virtual network or change the AllowedCopyScope setting to allow copy operations from anywhere. The latter approach was tested and successfully resolved the issue.

Resources:

• Permitted scope of copy operations (CopyBlob) and HTTP 403 AllowedCopyScopeAuthorizationFailure
• Azure Storage Account Networking

Hope this helps. If you have any follow-up questions, please let me know. I would be happy to help.

Please do not forget to "up-vote" wherever the information provided helps you, as this can be beneficial to other community members.