question

AlexAlexon-4788 avatar image
0 Votes"
AlexAlexon-4788 asked 08345774 answered

how to set access permissions for azure blob storage container at folder (prefix) level

How do I set access permissions for entire folder (theoretically prefix) in storage container? Example; I have 2 folders (containing many subfolders/objects) in single container(let's call them folder 'A' and 'B') and 4 members in project team. All 4 members can have read/edit access for folder A but only 2 of the members are allowed to have access to folder 'B'. Is there a simple way to set these permissions for each folder? There are hundreds/thousands of files within each folder and it would be very time consuming to set permissions for each individual file. Thanks for any help.

Google Cloud Storage support this based on "conditions"
AWS S3 supports this based on "bucket policy"+ "conditions"

azure-storage-accountsazure-blob-storageazure-rbac
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

SumanthMarigowda-MSFT avatar image
0 Votes"
SumanthMarigowda-MSFT answered SumanthMarigowda-MSFT edited

@AlexAlexon-4788 Firstly, apologies for the delay in responding here and any inconvenience this issue may have caused.


You may try the below mentioned options:


If you use ADLS (HNS) I believe you can set an ACL on a folder. . For existing storage account blob container, you would need to copy into an HNS enabled storage account (current situation)


You could produce a SAS for a blob container or for individual blobs(SAS token can be used to restrict access to either an entire blob container or an individual blob. This is because a folder in blob storage is virtual and not a real folder.).


There is a similar discussion thread please refer to the suggestion mentioned in this MSDN thread.


Manage anonymous read access to containers and blobs


Hope this helps!


Kindly let us know if the above helps or you need further assistance on this issue.




Please don’t forget to "Accept the answer" and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.



· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@AlexAlexon-4788 Just checking in to see if the above answer helped. If this answers your query, please don’t forget to "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.


0 Votes 0 ·
SumanthMarigowda-MSFT avatar image
0 Votes"
SumanthMarigowda-MSFT answered SumanthMarigowda-MSFT commented

@AlexAlexon-4788 Just checking in to see if the above answer helped. If this answers your query, please don’t forget to "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

· 3
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@AlexAlexon-4788 Just checking in to see if the above answer helped. If this answers your query, please don’t forget to "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

0 Votes 0 ·

@Sumarigo-MSFT , Thanks for your support.



I have not verified the solution completely, because need to check for impacts related to HNS.
As this above mentioned solution is a major change, we are exploring some alternative designs.




0 Votes 0 ·

@AlexAlexon-4788 Just checking in to see if the above answer helped. If this answers your query, please don’t forget to "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

0 Votes 0 ·
08345774 avatar image
0 Votes"
08345774 answered

I want to be able to trigger an event when the folder within my container gets deleted to autocreate it... can this be done?

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.