How to discover unused file permissions in Azure Files

Question

Does Microsoft offer any solution to detect unused FILE permissions in Azure Files so that IT can take a least-privilege approach to file access? I had hoped that Entra Permissions Management would do this, but best I can tell it is more about detecting and limiting unnecessary IT admin permissions, and maybe app-level permissions. Doesn't mention anything about file permissions though.

Answer 1

Not natively. One option is to use third-party products, such as https://www.varonis.com/coverage/azure-files

Alternatively, you can develop your own solution by digging through the logs by following https://learn.microsoft.com/en-us/azure/storage/files/storage-files-monitoring

---

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin