users cannot upload documents to blob storage file share

Acc Admin 0 Reputation points
2025-12-17T19:22:21.41+00:00

Using EntraID and OAUTH

The user account has the following RBAC roles in place:

Storage Actions Blob Data Operator

Storage Blob Data Owner

Storage File Data SMB Share Contributor

Error messsage received when trying to put folders OR files into file share using Azure Storage Explorer:

RESPONSE Status: 403 This request is not authorized to perform this operation using this permission.

Content-Length: 279

Content-Type: application/xml

Date: Wed, 17 Dec 2025 18:36:57 GMT

Server: Windows-Azure-File/1.0 Microsoft-HTTPAPI/2.0

X-Ms-Client-Request-Id: 132dffb4-0413-43a4-5e6d-edef519f2a0f

X-Ms-Error-Code: AuthorizationPermissionMismatch

X-Ms-Request-Id: 87b1553d-e01a-0045-6784-6fc4ed000000

X-Ms-Version: 2024-11-04

Response Details: <Code>AuthorizationPermissionMismatch</Code><Message>This request is not authorized to perform this operation using this permission. </Message>

Azure Blob Storage
Azure Blob Storage
An Azure service that stores unstructured data in the cloud as blobs.
0 comments No comments
{count} votes

Answer recommended by moderator
  1. Ravi Varma Mudduluru 4,085 Reputation points Microsoft External Staff Moderator
    2025-12-17T20:00:10.1833333+00:00

    Hello @Acc Admin,

    Thanks for reaching out to Microsoft Q&A.

    I understand that you're running into a permissions issue when trying to upload files to your Azure file share using Azure Storage Explorer. The 403 error with the message "AuthorizationPermissionMismatch" typically points to insufficient permissions for the operation you're trying to perform.

    The 403 AuthorizationPermissionMismatch error is expected if NTFS permissions are not configured. Azure Files access using Entra ID requires both Azure RBAC and NTFS permissions on the file share.

    You mentioned in the above question that your user has Blob and Files‑SMB roles, but not the Azure Files REST data‑plane role required for Entra ID/OAuth operations. Please assign Storage File Data Privileged Contributor (at the storage account or file share scope) to the identity used in Storage Explorer, then retry.

    User's image

    Reference Document:

    https://learn.microsoft.com/en-us/azure/storage/files/authorize-oauth-rest?tabs=portal#privileged-access-and-access-permissions-for-data-operations

    Kindly let us know if the above helps or you need further assistance on this issue.

    Please "Accept the Answer" if the information helped you. This will help us and others in the community as well.

    1 person found this answer helpful.

0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.