Azure Storage Explorer failing with Access Control Lists

user_16406156 0
Viewed 801

I've set up my Azure data lake gen2 with Access Control List (ACL) access via AAD groups only (no RBAC). The container folder has been granted execute and read permission, as has the relevant sub folder and files.

I can confirm access to the ACL controlled files, via Power BI, however Azure Storage Explorer appears not to recognise the ACL permission. Is the lack of support for ACL a know limitation for Azure Storage Explorer, or is there a way to make Azure Storage Explorer recognise allocated ACL's?

Steps taken;

-created storage account as an Azure administrator, defaulted all options, except for adding hierarchical name support

-created container raw

-against container, selected Manage ACL, and added permissions for me, both Access and Default enter image description here

-Saved ACL settings

-Uploaded a file to the folder

-Opened Azure Storage Explorer

-I can see the new file under the admin account, but not under my account

enter image description here

I expected to be able to see the storage account in the yellow section. I am using version 1.20 of storage explorer

If I click on the containers Manage ACL under the user I created the storage account as, I can see permissions added as expected, I just cannot see the container under my account in Storage Explorer

enter image description here

azure-data-lake-gen2 azure-storage-explorer azure acl
1 Answers

just been struggling with similar. Not sure if your situation is the same as mine but here is what I have found.

If a user has no RBAC over the storage account then they aren't able to list the containers so you wouldn't expect the account or containers to appear under there user account in Storage Explorer.

That doesn't mean you can't manually add the container though.

Goto Local&Attached>StorageAccounts. Right Click and choose Connect to Azure Storage.

enter image description here

Then select ADLS Gen2 Container or Directory

enter image description here

and then choose Azure AD as the auth method, select the relevant account if prompted, and then finally enter the full path of your container.

i.e. https://adls storage account name.dfs.core.windows.net/container name

enter image description here

And you should be good to go. Good luck!

user_159069740
Related