Not authorized to view storage and logs for trusted signing account I created

Question

Not authorized to view storage and logs for trusted signing account I created

Dave 206

I'm trying to get usage metrics from trusted monitoring so I can monitor usage before we hit the monthly cap and start being billed extra.

I am following the instructions to store logs from trusted signing within the Azure storage account as defined here - https://learn.microsoft.com/en-us/azure/trusted-signing/how-to-sign-history.

When I get to the last step:

In the list, select the container named...

I get:

This request is not authorized to perform this operation.

Why? I'm using the same account to create the storage account that I also used to create the trusted signing account and add the diagnostic setting, so why can't I view the logs?

Vinod Kumar Reddy Chilupuri 4,190 Reputation points Microsoft External Staff Moderator

2024-10-03T08:39:57.11+00:00
Hi Dave,

Welcome to Microsoft Q&A, thanks for posting your query.

The error message you got "This request is not authorized to perform this operation" indicates that the account you are using doesn't have the permission to access the container in the azure storage account, even you are using same storage account you need to setup the storage and trusted signing account. Here are some possible reasons for this issue.

When you create an Azure Storage account, you are not automatically assigned permissions to access data via Microsoft Entra ID. You must explicitly assign yourself an Azure role for access to Blob Storage. You can assign it at the level of your subscription, resource group, storage account, or container.

Make sure that your account has the necessary permissions to access the container in the azure storage account. You can check the permissions by navigating to the storage account, select "Access Control (IAM)" and check the role assignments tab. Make sure your account has "Storage Blob Data Contributor" or "Storage Blob Data Reader " role assigned.

Storage Blob Data Contributor: Use to grant read/write/delete permissions to Blob storage resources.

Storage Blob Data Reader: Use to grant read-only permissions to Blob storage resources.

Make sure that your diagnostics settings for trusted signing account are set up properly. You can check this in Azure portal. Navigate to Storage account > Monitoring (Classic) > Diagnostic settings.

Ensure that the storage account is chosen as the destination for the logs check whether the container name is correct.

Reference:

https://learn.microsoft.com/en-us/azure/storage/blobs/authorize-access-azure-active-directory

https://learn.microsoft.com/en-us/azure/trusted-signing/how-to-sign-history#configure-diagnostic-settings

https://learn.microsoft.com/en-us/azure/storage/blobs/assign-azure-role-data-access?tabs=portal

Please let us know if you have any further queries. I’m happy to assist you further.
Vinod Kumar Reddy Chilupuri 4,190 Reputation points Microsoft External Staff Moderator

2024-10-04T05:13:07.76+00:00

Hi Dave,
Just checking in to see if the below answer helped. If this answers your query, please don’t forget to "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.
Vinod Kumar Reddy Chilupuri 4,190 Reputation points Microsoft External Staff Moderator

2024-10-07T01:21:27.6+00:00

Hi Dave,
Just checking in to see if the below answer helped. If this answers your query, please don’t forget to "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.
Vinod Kumar Reddy Chilupuri 4,190 Reputation points Microsoft External Staff Moderator

2024-10-08T02:31:55.33+00:00

Hi Dave,
Happy to hear that your problem has solved. Please Accept the answer if the answer helped you which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

Answer accepted by question author

1 additional answer

Your answer

Vinod Kumar Reddy Chilupuri 4,190 Reputation points Microsoft External Staff Moderator

2024-10-04T05:13:07.76+00:00

Hi Dave,
Just checking in to see if the below answer helped. If this answers your query, please don’t forget to "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.
Vinod Kumar Reddy Chilupuri 4,190 Reputation points Microsoft External Staff Moderator

2024-10-07T01:21:27.6+00:00

Hi Dave,
Just checking in to see if the below answer helped. If this answers your query, please don’t forget to "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.
Vinod Kumar Reddy Chilupuri 4,190 Reputation points Microsoft External Staff Moderator

2024-10-08T02:31:55.33+00:00

Hi Dave,
Happy to hear that your problem has solved. Please Accept the answer if the answer helped you which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

Answer 1

@Dave I'm glad that you were able to resolve your issue and thank you for posting your solution so that others experiencing the same thing can easily reference this! Since the Microsoft Q&A community has a policy that "The question author cannot accept their own answer. They can only accept answers by others ", I'll repost your solution in case you'd like to "Accept " the answer.

Issue: Trying to get usage metrics from trusted monitoring to avoid exceeding the monthly cap and incurring extra charges. Following the steps to store logs from trusted signing in an Azure storage account, I encounter the error "This request is not authorized to perform this operation" when selecting the container. Despite using the same account to create both the storage and trusted signing accounts, and adding the diagnostic setting, I still can't access the logs.

Solution: After inital troubleshooting, you were able to fix the issue.
The issue was related to network access. Once I added a firewall rule, it resolved the problem.

Please let us know if you have any more questions and we will be glad to assist you further. Thank you!

Answer 2

Dave 206

The problem turned out to be network access, once I added a firewall rule it was fine

Share via

Not authorized to view storage and logs for trusted signing account I created

1 additional answer

Your answer