1

I want to limit my user assigned MSI to be able to read and write tables only in a storage account. When assigning roles on IAM blade in the portal I don't see any table related roles. Why is that? I don't wanna use any SAS.

enter image description here

2

For now there is no support for accessing Azure Table Storage with Managed Identities.

Supported services are described here:

According to documentation, Azure Table Storage allows you to authenticate only by using account key. So SAS authentication is not solution here either.

Possible solution could be like this:

  1. Create Azure Key Vault and store account key as a secret Assign
  2. permission to this key vault to your Managed Identity Use Managed
  3. Identity to fetch the key from key vault in a runtime
  4. Use the key to Azure Table Storage

As additional step you can create separate Storage Account to store only tables. With this approach you should be able to restrict access to tables service properly.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.