Search code examples
azureazure-storage

Azure Storage Blob/File per tenant


I'm trying to understand how I can achieve the following in our multi-tenant application: - Have a seperate 'file location' per tenant (guid) - Ability to map this file location to a PC - Make sure that a 'file location' can only be accessed with a single key, meaning, one key should not be allowed to access multiple 'file locations' - Restrict access to pure read-only purposes

I was looking at Azure File Shares, but, when creating a few fileshares, I noticed that, when trying to map the fileshare to my PC, it's using the same key for all these fileshares. That's a problem, I don't want to give any tenant the possibility to map different tenant's file locations using the same key.


Solution

  • File shares now come with IAM (Preview), so how about you create a security group, add the user(s) to that group, and associate the file share with that security group.