Storage account access

Question

Hi,

I gave the access Derek (******@cabrella.com) to our storage account (cabrelladev). However, he can't see anything when he logs into azure portal.

Can you let me know what I need to do so that he can see it from the list?

Thanks.

Answer 1

Hi @Brian Kim,

To list storage accounts in Azure Portal, the user must have at least the "Reader" role assigned to them. This role allows the user to read and list resources, which is necessary for accessing storage accounts.

The Reader role is an Azure Resource Manager role that permits users to view storage account resources but not modify them. It doesn't provide read permissions to data in Azure Storage, but only to account management resources. The Reader role is necessary so that users can navigate to blob containers in the Azure portal.

For example, if you assign the Storage Blob Data Contributor role to user Mary at the level of a container named sample-container, then Mary is granted read, write, and delete access to all of the blobs in that container. However, if Mary wants to view a blob in the Azure portal, then the Storage Blob Data Contributor role by itself won't provide sufficient permissions to navigate through the portal to the blob in order to view it. The additional permissions are required to navigate through the portal and view the other resources that are visible there.

A user must be assigned the Reader role to use the Azure portal with Microsoft Entra credentials. However, if a user is assigned a role with Microsoft.Storage/storageAccounts/listKeys/action permissions, then the user can use the portal with the storage account keys, via Shared Key authorization.

Reference:

https://learn.microsoft.com/en-us/azure/storage/blobs/assign-azure-role-data-access?tabs=portal

https://learn.microsoft.com/en-us/azure/storage/blobs/authorize-data-operations-portal

---

Please do not forget to "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.           

If you have any other questions or are still running into more issues, let me know in the "comments" and I would be happy to help you.