azure blob storage reader access not working as expected

Question

I have assigned a Role Based Storage Reader access to an Azure user for an Azure Storage Account. The User is able to see the Storage account but unable to see any blobs or tables or queue. Why is that? I thought Reader access should allow a User to View what is inside a Blob service i.e containers and individual blobs? I have attached a screen shot here

Changing the permission to 'Contributor' solves the problem but grants much more permission than required.

Any thoughts on this?

Answer 1

RoleBasedAccess is for resource level and not for individual resource entities in storage service. If you need to provide ReadAccess, WriteAccess permissions on storage blobs/containers then you should refer to these msdn links
https://azure.microsoft.com/en-us/documentation/articles/storage-dotnet-shared-access-signature-part-1/
https://azure.microsoft.com/en-us/documentation/articles/storage-dotnet-shared-access-signature-part-2/