question

aliasmrchips-3050 avatar image
0 Votes"
aliasmrchips-3050 asked VENKATABONDELA-4539 commented

Cannot access container in a Storage account

I am trying to follow this quickstart: https://docs.microsoft.com/en-us/azure/storage/blobs/storage-quickstart-blobs-portal

However, after creating the container, I can't navigate to it in order to upload a blob.

In particular, I get an error saying "This request is not authorized to perform this operation."


azure-blob-storage
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

shivapatpi-MSFT avatar image
0 Votes"
shivapatpi-MSFT answered

Hello @aliasmrchips-3050 ,
Just to confirm your issue was due to the Firewall of the storage account.

On the Azure Portal you saw for your storage account Firewall was enabled.
(Storage Account -> Networking -> Allow Access from "Selected Networks")

To resolve the issue: You have selected "All Networks".

I just summarized here in the answer section , so that you can "Accept this answer" it will help community out there .




5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

shivapatpi-MSFT avatar image
0 Votes"
shivapatpi-MSFT answered VENKATABONDELA-4539 commented

Hello @aliasmrchips-3050 ,
Thanks for your query , some times this might happen due to in-sufficient privileges'


Can you try adding below role for that storage account ?

Steps:
1) Browse to Storage Account in the Azure Portal
2) Access Control (IAM)
3) Grant Access to this resource section (Add Role Assignments)
4) Role: Storage Blob Data Contributor
Assign Access to: Use the default values (I.e. User , Group , or Service Principal)
Select: User Name
5) Save


Kindly let us know if those steps help you out in resolving the issue and don't forget to "Accept the Answer".




· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

this works. Thanks

0 Votes 0 ·
aliasmrchips-3050 avatar image
0 Votes"
aliasmrchips-3050 answered AMBATIPRAVEEN-6030 commented

I am the owner, which seems like it should be sufficient. I tried adding myself to the container, to the storage account and to the subscription as a Contributor and a Storage Blob Data Contributor, all to no effect. I also tried logging out and back in and using the Microsoft Azure Storage Explorer application.

· 4
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hello @aliasmrchips-3050 ,
More significantly , did you add role Storage Blob Data Contributor at the storage account level ? (Not to the container level).

Also just make sure to double check there is no firewall for that storage account (Storage Account -> Networking -> Allow Access from "All networks")

0 Votes 0 ·

The firewall was the problem. Thanks!

0 Votes 0 ·

I don't see an option to accept the answer that was actually the answer, but would be glad to do so.

0 Votes 0 ·

In our case we should not enable "All Networks" as It is vulnerability.

FYI - I have provided Storage Blob Data Contributor permissions to Virtual Machine/Service Principal/My user. But No Luck :(

0 Votes 0 ·