This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(54.400000000000006, 99%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA4%3C/text%3E%3C/svg%3E)
Hi Guys,
We have an Azure File share which has been joined to the on-premise Active Directory environment. We're seeing an issue when we configure share level permissions. For example, if we configure the Storage File Data SMB Share Contributor and apply it to an Azure AD group which contains user objects which are synced via Azure AD, the end users are unable to mount the Azure File share via UNC. However, if we manually assign each Azure AD user object the Storage File Data SMB Share Contributor then they can successfully mount the share via UNC.
I don't see any documentation which states an Azure AD group which contains user objects synced via Azure AD can't be used to apply share level permissions so I'm wondering if anyone else has come across this?
@Armed 4Life
Does the group exist in both AD DS and Azure AD? The selected Azure AD identity must be a hybrid identity and cannot be a cloud only identity. For more information you might check the documentation here.
Thanks deherman. That was exactly the issue. I was trying to use a group that was created in Azure AD. Once I re-created the group in the on-premise AD and synced it I was able to use it for setting the share level permissions.
@Armed 4Life
Glad that resolved your problem. Please mark this as answered as this might be helpful to others that face this issue.
Have a great day!