Can't download a VHD from storage

Question

using azure storage explorer - I can't download a VHD..

I get the error:

AzCopy error message: failed to perform copy command due to error: Login Credentials missing. No SAS token or OAuth token is present and the resource is not public

I am global admin and I add some extra storage permissions. The docs on permissions just go around and don't say anything. I don't want to become an azure permissions expert. I want to download the VHD.

Answer 1

hi there admindft ,

thanks for posting this at Q&A, first, let's make sure u have the right access. even if u're a global admin, azure storage has its own permission system. u need at least 'storage blob data reader' role on that specific storage account. go to the storage account in azure portal, hit 'access control (iam)', then add ur account with that role. wait a few mins azure can be slow with updates )

now, in storage explorer, try this )) right click the storage account and pick 'connect to azure storage'. choose 'azure ad' and sign in again. sometimes the token just... vanishes into thin air )) if it still whines about credentials, check if the vhd's container has 'anonymous read access' off. u can tweak that under 'container properties' in storage explorer.

if u're using a subscription with multiple tenants, storage explorer might silently pick the wrong one. click the person icon top right, then 'manage accounts'. switch to the tenant where the storage lives.

also check this storage explorer sometimes gets stuck with old permissions. go to 'edit' > 'clear' > 'clear all saved credentials'. then restart and reconnect. yes, its annoying, but it works ))

azcopy needs either a sas token or azure ad auth. if u want the quick and dirty way, generate a sas token for the vhd. right click it in storage explorer, 'get shared access signature', give it read permissions, and boom paste that url into azcopy or a browser.

worth looking into the network as well )) corporate proxies or firewalls can block azcopy. try from a different network or check if ur admin whitelists azure storage urls.

permissions can be a maze )) hope this gets u unstuck

Best regards,

Alex

and "yes" if you would follow me at Q&A - personaly thx.
P.S. If my answer help to you, please Accept my answer

https://ctrlaltdel.blog/

Answer 2

Use SAS token

follow https://talibilat.medium.com/a-step-by-step-guide-to-using-azcopy-59a50d2bcfba - this gives you step by step instructions

---

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin