BLOB storage account access

Nagesh CL 641

Hi All,
I am facing issues accessing a container within BLOB storage account. Its a multi-part issue as below: -

Copy data activity in ADF: -
Able to create a linked services using SAS URI authentication method. The test connection is successful as well. But when i try to use this linked service in copy data activity to post a file to the blob container, i am getting error as below: -

"Cloud stored credentials cannot be found with retry, please check whether related resource had been deleted before."

Also, when i try use the browse option to select the container / folder name (While creating dataset), i am getting a different error as below: -

Connecting through azure storage explorer : -
When we try to connect to the container using storage explorer using SAS URI method, we are successfully able to connect to the folder and upload files as well.

But when we try to access the account via subscription and dev account, we are getting the error as below: -
"This request is not authorized to perform this operation using this permission."

My dev account is added to Azure active directory account and this account has Reader permission on the storage account and contributor permission on the container.

Even from the azure portal, we are unable to see the contents of the container. Same permission error here as well.

Could anyone please help / guide with some troubleshooting steps to resolve the issue?

Thanks.

PRADEEPCHEEKATLA-MSFT 84,381 Reputation points Microsoft Employee

2021-10-29T05:49:03.897+00:00
Hello @Nagesh CL ,

Thanks for the question and using MS Q&A platform.

Could you please share more details on how you are connecting the Azure Storage account with ADF?

Authentication method used: (Account Key, SAS URL, Service Principal, Managed Identity, User Assigned Managed Identity)?

Does test connection show any error message?

Also please check Azure Blob storage “Firewalls and virtual networks” settings under Networking tab. If Selected networks is checked, please try checking All networks. If you want to enable firewall then please make sure to whitelist the IP's that need to access your storage account.
Nagesh CL 641 Reputation points

2021-10-29T13:44:00.893+00:00

Hello @PRADEEPCHEEKATLA-MSFT ,

Thanks for responding. We are using the SAS URL authentication method while creating the link service and test connection of the linked service is successful. The error is when we create a dataset using the successfully created linked service.

With regards to networking, it does not allow all networks. There is private virtual network configured. We have approved connections to that virtual network.

Please let me know if any more details are required.

Thanks.
PRADEEPCHEEKATLA-MSFT 84,381 Reputation points Microsoft Employee

2021-11-01T11:59:02.127+00:00

Hello @Nagesh CL ,

When you say you are using the "There is private virtual network configured", have you configured private endpoints?

It's recommended that you create Managed private endpoints to connect to all your Azure data sources.

For more details, refer to Azure Data Factory Managed Virtual Network.
Nagesh CL 641 Reputation points

2021-11-02T06:40:31.06+00:00

Hi @PRADEEPCHEEKATLA-MSFT ,
Yes, the private endpoints are configured and the linked services are using these private endpoints. They are Approval State is "Approved" and Provisioning State is "Succeeded" as well.
PRADEEPCHEEKATLA-MSFT 84,381 Reputation points Microsoft Employee

2021-11-02T10:47:34.273+00:00

Hello @Nagesh CL ,

Could you please help me with the screenshot of the linked service connection used for the dataset?
PRADEEPCHEEKATLA-MSFT 84,381 Reputation points Microsoft Employee

2021-11-08T09:27:18.6+00:00

Hello @Nagesh CL ,

Follow up to see if you have had a chance to see the previous response. We need the following information to understand/investigate this issue further.

Share via

BLOB storage account access