Azure Storage Explorer failing with Access Control Lists

Question

I've set up my Azure data lake gen2 with Access Control List (ACL) access via AAD groups only (no RBAC). The container folder has been granted execute and read permission, as has the relevant sub folder and files.

I can confirm access to the ACL controlled files, via Power BI, however Azure Storage Explorer appears not to recognise the ACL permission. Is the lack of support for ACL a know limitation for Azure Storage Explorer, or is there a way to make Azure Storage Explorer recognise allocated ACL's?

Steps taken;

-created storage account as an Azure administrator, defaulted all options, except for adding hierarchical name support

-created container raw

-against container, selected Manage ACL, and added permissions for me, both Access and Default

-Saved ACL settings

-Uploaded a file to the folder

-Opened Azure Storage Explorer

-I can see the new file under the admin account, but not under my account

I expected to be able to see the storage account in the yellow section. I am using version 1.20 of storage explorer

If I click on the containers Manage ACL under the user I created the storage account as, I can see permissions added as expected, I just cannot see the container under my account in Storage Explorer

Answer 1

just been struggling with similar. Not sure if your situation is the same as mine but here is what I have found.

If a user has no RBAC over the storage account then they aren't able to list the containers so you wouldn't expect the account or containers to appear under there user account in Storage Explorer.

That doesn't mean you can't manually add the container though.

Goto Local&Attached>StorageAccounts . Right Click and choose Connect to Azure Storage .

Then select ADLS Gen2 Container or Directory

and then choose Azure AD as the auth method, select the relevant account if prompted, and then finally enter the full path of your container.

ie https:// adls storage account name .dfs.core.windows.net/ container name

And you should be good to go. Good luck!