How to Grant Azure Blob Storage Container Add Role for Security

Select Language:

If you want a user to create and manage Azure storage containers and blobs directly from the Azure portal, the best way is to assign them the “Storage Blob Data Contributor” role. This role gives the user the necessary permissions to read, write, and delete blob data within your storage containers.

Here’s a quick breakdown of what the “Storage Blob Data Contributor” role offers:

Read access: The user can view and read blob data.
Write access: The user can add new blobs or update existing ones.
Delete access: The user can delete blobs if needed.

If your goal is to allow the user to manage the entire storage account, including creating or deleting containers, they would need a broader permission set, such as the “Storage Account Contributor” role. This role covers more activities beyond just blobs.

For a detailed explanation of these roles and permissions, you can check out the official Azure documentation here: Azure Storage Roles. And if you want step-by-step instructions on managing blobs in the portal, visit this link: Azure Blob Containers in Portal.

If you have more questions or if something isn’t working as expected, feel free to leave a comment. I’m happy to help you troubleshoot!

And don’t forget to “Accept the answer” and give a thumbs up if this information was useful. It helps others in the community too!