Moving On-Prem File Share Data to an Azure File Share

Question

Hi all, I just recently set up an Azure Storage account, joined it to our on-prem Active Directory, gave it a private endpoint, created a file share in the storage account, set up the Storage File Data SMB roles on the share, and then set up the NTFS permissions on the share. I can now access the file share using a UNC path from my domain joined PC. Pretty nice.

Here's the question: I have an on-prem file share on a SAN system that I want to copy over the network to the Azure file share and keep all of the NTFS settings on the folders and files when copied. What is the best tool or tools to use to do this?

Any feedback appreciated.

Answer 1

@bushman

The permissions on the files and folders will remain when you migrate the data, the share permissions have to be configured using the RBAC roles.
We have introduced three Azure built-in roles for granting share-level permissions to users:

Storage File Data SMB Share Reader allows read access in Azure Storage file shares over SMB.

Storage File Data SMB Share Contributor allows read, write, and delete access in Azure Storage file shares over SMB.

Storage File Data SMB Share Elevated Contributor allows read, write, delete and modify NTFS permissions in Azure Storage file shares over SMB.

https://learn.microsoft.com/en-us/azure/storage/files/storage-files-identity-auth-active-directory-domain-service-enable#2-assign-access-permissions-to-an-identity

To migrate the permissions on the files and folders, you need to use a tool like Azure File Sync, AzCopy or Robocopy

https://learn.microsoft.com/en-us/azure/storage/files/storage-files-migration-overview#migration-toolbox

-----------

Please don’t forget to "Accept the answer" and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.

Answer 2

Thanks @deherman-MSFT for your help...quick point, though. Instead of using tools like robocop, if I just manually copy -paste files from the mounted on-prem file-server drive to the mounted azure-drive on my windows file explorer, will all NTFS permissions be copied over ???