Azure File Share mount to Drive Z with Read only access

Question

Hello community,

I have Azure File Share with bunch of documents which needs to shared through mounting it to the Drive Z. Is there any chance to mounting it with Read only access so they can download or move it inside of file share but cannot delete.

Thanks for your help

Answer 1

@Abduazim Sobitov Welcome to Microsoft Q&A Forum, Thank you for posting your query here!

Adding more information to the above response!

If you need to provide only read only access for azure file share you can perform using Azure Active Directory

Firstly, Let me explain how RBAC works. in Azure File Share.

Storage File Data SMB Share Reader Allows for read access to files and directories in Azure file shares. This role is analogous to a file share ACL of read on Windows File servers. Learn more.

Configure directory and file level permissions over SMB

Enable Azure Active Directory Domain Services authentication on Azure Files

You can also use Azure Storage Explorer tool to generate a SAS key with limited permissions (Read/Write or more) for your file share and giving that to your users. Then having them use the SAS key to authenticate to your file share on their own copy of azure storage explorer. This will grant them read/write only access, without delete. Then having them Read/Write and inform you when they've completed the read/upload so you can manually force a sync (or wait 24 hours for the automated sync).

Azure File Share Permissions without Azure AD

Please let us know if you have any further queries. I’m happy to assist you further.

----------

Please do not forget to and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.

Answer 2

Azure file share not yet supports to limit file permissions like Read Only access to the users who have access. SAS token supports that, however, mounting file share with SAS token is not supported. Only way I see is to use a Preview feature, SFTP share for the storage account, access the files using sftp clients like FileZilla. If you are interested in this approach, following steps will help

• Enable SFTP feature in your storage account: It is a two step process. 1. Upgrade Azure Blob Storage with Azure Data Lake Storage Gen2 capabilities 2. Enable SFTP preview support
• Create SFTP User, assign permissions like Read Only access, set the access like ssh key/password. Reference
• Connect using SFTP client

----------

--please don't forget to upvote and Accept as answer if the reply is helpful--