1

I want to limit my user assigned MSI to be able to read and write tables only in a storage account. When assigning roles on IAM blade in the portal I don't see any table related roles. Why is that? I don't wanna use any SAS.

enter image description here

Improve this question

1 Answer 1

Reset to default
2

For now there is no support for accessing Azure Table Storage with Managed Identities.

Supported services are described here:

According to documentation, Azure Table Storage allows you to authenticate only by using account key. So SAS authentication is not solution here either.

Possible solution could be like this:

  1. Create Azure Key Vault and store account key as a secret Assign
  2. permission to this key vault to your Managed Identity Use Managed
  3. Identity to fetch the key from key vault in a runtime
  4. Use the key to Azure Table Storage

As additional step you can create separate Storage Account to store only tables. With this approach you should be able to restrict access to tables service properly.

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.