Azure Blob Storage Access Using Azure AD and SAS Keys

Question

How can I resolve issues with Azure Blob Storage access when using Azure AD authentication and is it possible to browse files via a browser URL?

 "PS - Based on common issues that we have seen from customers and other sources, we are posting these questions to help the Azure community."

Answer 1

Greetings!

When encountering issues accessing Azure Blob Storage with Azure AD authentication, it's important to understand the Azure AD authentication process. Ensure that Azure AD is properly configured for your storage account, retrieve the Azure AD token using the appropriate method, and use the token to authenticate and access your Azure Blob Storage.

For browsing files via a browser URL, directly using RBAC roles as a parameter is not supported. However, you can use a Shared Access Signature (SAS) key to securely download files from the browser. SAS keys grant limited access to your storage resources without exposing your account key.

For more detailed guidance on both Azure AD authentication and using SAS keys, refer to the following Azure documentation links:

• Authenticate access to Azure Storage using Azure Active Directory
• Authorize access to data in Azure Storage
• Grant limited access to Azure Storage resources using shared access signatures (SAS)

Hope this helps. If you have any follow-up questions, please let me know. I would be happy to help.

Please do not forget to "up-vote" wherever the information provided helps you, as this can be beneficial to other community members.