Azure Container Level Access

1
votes

We have recruitment that need to store the file in Blob Storage. The blob storage account which i have created for a company. There are multiple site for a same company. We need to restrict the site member to see other site files. So I need the access key based on container level.

The container will be created dynamically from C#. The credential / access key that should be created while creating the container from C# and the container level access key / credential will be shared with site members not the storage account access key. Storage account key will be in application configure side. So storage account key will be hidden from the site members.

How do I get the container level access key / credential in Azure blob storage?

1
azureazure-storageazure-blob-storage
There is access no such access key at the container level, as @GeorgeChen said, you shoould use SAS Token or RBAC – Thomas

1 Answers

2
votes

I think SAS could meet your requirements.With a SAS, you can grant clients access to resources in your storage account, without sharing your account keys. And you could set the interval over which the SAS is valid and the permissions granted by the SAS. For example, a SAS for a blob might grant read and write permissions to that blob, but not delete permissions.

You could create SAS pointing to one or more resources and including a token that contains a special set of query parameters.

Here are two examples about how to use SAS, first SAS examples and create SAS.

If you still have other questions, please me know.