Azure File Share with User Permissions.

---

Hi,
I'm currently midway through the Az-103 training videos hosted by Cherokee and Aubri.

My current setup is a Azure Hybrid setup. We have files shares on premises with various folders restricted by permissions - as you would for Data Security. Where does this all fit in with Azure File Storage. After reviewing the videos on the training it doesn't go into detail on how you create folders within the share and attach permissions.We are looking to go full into Azure which means no on premises servers and may also look at decommissioning the DC in Azure to rely strictly on Azure Active Directory.

Do I need to create a file server to allow specific permissions on folders? What real work examples exist of users taking advantage on Azure File Shares? I guess the question is whats the point of Azure File Share?

Thanks in advance.

Rgds

@Ryan-Kular ,

I hope all is well. Take a look at the following for more information:

https://docs.microsoft.com/en-us/azure/storage/files/storage-files-introduction

Cheers,

Adam

Thank you.

This is the article I've picked out from the link you sent. A bit of background info...

I'm looking at toying with the idea of becoming serverless. No longer do we need a dedicated file server. The best practice for on-prem, file shares is to grant everyone "full control" access at the share level and then use ACLs at folder/file level to secure your share. Allows us to to confirm to the Accountability principle in GDPR. I know we have other options on the table i.e SharePoint and One Drive, these would be considered further down the line, once we roll out Microsoft Information Protection. But in the meantime Azure File Share looks ideal.

I guess I was looking for a hands on guide to achieve this. It seems that I need to use RBAC, using AAD at the share allowing me to then use ACLs on the file/folder level. Queue the next proof of concept lab.

This is the article I need to work through:

https://docs.microsoft.com/en-us/azure/storage/files/storage-files-identity-auth-active-directory-enable

Just a follow up question. Should i have a dedicated storage account strictly for Azure file shares?

Is that what is suggested and the point is that by doing this, you can get better performance, monitoring and troubleshooting.

Many thanks Adam.
(and apologies for the long winded questions)

@Ryan-Kular ,

I am glad that the article will prove to be helpful. The short answer is YES.

The specifics of how to use an Azure file share with Windows can be found here:

https://docs.microsoft.com/en-us/azure/storage/files/storage-how-to-use-files-windows