Storage Accounts - List Keys

Lists the access keys or Kerberos keys (if active directory enabled) for the specified storage account.

POST https://management.azure.com/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Storage/storageAccounts/{accountName}/listKeys?api-version=2023-05-01
POST https://management.azure.com/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Storage/storageAccounts/{accountName}/listKeys?api-version=2023-05-01&$expand=kerb

URI Parameters

Name In Required Type Description
accountName
path True

string

The name of the storage account within the specified resource group. Storage account names must be between 3 and 24 characters in length and use numbers and lower-case letters only.

Regex pattern: ^[a-z0-9]+$

resourceGroupName
path True

string

The name of the resource group within the user's subscription. The name is case insensitive.

Regex pattern: ^[-\w\._\(\)]+$

subscriptionId
path True

string

The ID of the target subscription.

api-version
query True

string

The API version to use for this operation.

$expand
query

ListKeyExpand

Specifies type of the key to be listed. Possible value is kerb.

Responses

Name Type Description
200 OK

StorageAccountListKeysResult

OK -- list of keys retrieved and returned successfully.

Security

azure_auth

Azure Active Directory OAuth2 Flow

Type: oauth2
Flow: implicit
Authorization URL: https://login.microsoftonline.com/common/oauth2/authorize

Scopes

Name Description
user_impersonation impersonate your user account

Examples

StorageAccountListKeys

Sample request

POST https://management.azure.com/subscriptions/{subscription-id}/resourceGroups/res418/providers/Microsoft.Storage/storageAccounts/sto2220/listKeys?api-version=2023-05-01&$expand=kerb

Sample response

{
  "keys": [
    {
      "keyName": "key1",
      "permissions": "Full",
      "value": "<value>"
    },
    {
      "keyName": "key2",
      "permissions": "Full",
      "value": "<value>"
    }
  ]
}

Definitions

Name Description
KeyPermission

Permissions for the key -- read-only or full permissions.

ListKeyExpand

Specifies type of the key to be listed. Possible value is kerb.

StorageAccountKey

An access key for the storage account.

StorageAccountListKeysResult

The response from the ListKeys operation.

KeyPermission

Permissions for the key -- read-only or full permissions.

Name Type Description
Full

string

Read

string

ListKeyExpand

Specifies type of the key to be listed. Possible value is kerb.

Name Type Description
kerb

string

StorageAccountKey

An access key for the storage account.

Name Type Description
creationTime

string

Creation time of the key, in round trip date format.

keyName

string

Name of the key.

permissions

KeyPermission

Permissions for the key -- read-only or full permissions.

value

string

Base 64-encoded value of the key.

StorageAccountListKeysResult

The response from the ListKeys operation.

Name Type Description
keys

StorageAccountKey[]

Gets the list of storage account keys and their properties for the specified storage account.