Blob storage local users

Question

We have a requirement to download a file via SFTP. To test we used SFTP (preview) with Datalake storage. SFTP file download worked after performing the following steps:

Create storage account
Enable SFTP (preview)
Create container
Upload file to container through portal
Add a local user with all permissions
Download file with user connection string and password. Tested with Powershell and then our device, both worked.

Now we would like to create an app to maintain local users in the portal. In our case a local user is a device. The requirement is that each device is a unique local user. Our app will list all users (devices) for a storage account. The app will be able to create or delete a local user (device) in Azure. The problem is I have not found a way to programmatically add a local user. As well there is a limitation of 1000 local users per storage account. There can be thousands of devices. Lastly, we would like to be able to group devices by location. Is it possible to programmatically create local users? Can we programmatically get a list of users in the portal? What is the recommended design approach to accomplish our goal of creating an app to maintain devices in Azure storage?

Answer 1

Based on your description, I believe, you can use Azure AD with Storage to ensure that you have limitless user management features. With Azure AD and Azure role based access control, you can grand permissions to a security principal (user, group or application service principal).

Refer: https://learn.microsoft.com/en-us/azure/storage/blobs/authorize-access-azure-active-directory#overview-of-azure-ad-for-blobs

Hope this helps