Best practice of Azure Cloud Shell storage account for multiple user

Question

What is the best practice of managing multiple users' Cloud Shell?

Currently, I have two possible options for this question:

1. Assign all users who need Cloud Shell "Storage Account Contributor" role at the resource group scope, which can make them create their storage account.
2. Creates one storage account with its resource group automatically by the Cloud Shell, then assign the other users "Contributor" role, and use the existing resource group, storage account, and file share.

I wonder if there's the best way suggested doing this, including:

• How were these resources created? Manually or automatically?
• Which role should the other users be assigned?
• Should I create a resource group only used for Cloud Shell?
• Should every user need their own storage account and file share? or is it suggested to just use one existing file share for everyone?

There are several R&D teams using this subscription, so the independence of resources is quite important.

Answer 1

@KentChen-2307

I understand you wish to know some of the best practices regarding multiple users using Cloud Shell. Really it simply just depends on how you like to manage resources. The two options you have already outlined can be found on the Persist files in Azure Cloud Shell page. You might not wish to give everyone the access to create these resources. If so, you will probably find it easier to use existing resources when setting up their Cloud Shell.

How were these resources created? Manually or automatically?
If you choose existing resources then the resources will need to be manually created. Otherwise they will be automatically created if user has appropriate permissions.

Which role should the other users be assigned?
Could you please clarify which users you are asking about?

Should I create a resource group only used for Cloud Shell?
If you are going to use existing resources I would have a seperate RG. Othwerwise Cloud Shell will create a new RG for each user.

Should every user need their own storage account and file share? or is it suggested to just use one existing file share for everyone?
This is up to your preference.

Hope this helps. Let me know if you have any further questions or issues.

-------------------------------

Please don’t forget to "Accept the answer" and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.