Search code examples
azureazure-storage-accountazcopy

azcopy login not granting permissions


I want to use azcopy to download/upload to my blob storage.

Using azcopy login, opening the browser and login works fine.

$ azcopy login --tenant-id xxxx
To sign in, use a web browser to open the page https://microsoft.com/devicelogin and enter the code xxx to authenticate.

INFO: Login succeeded.

Now I am trying:

$ azcopy ls https://xxxx.blob.core.windows.net/xxxx

failed to obtain credential info: Login Credentials missing. No SAS token or OAuth token is present and the resource is not public

The container access level is set to private, the authentication method set to Azure AD User Account and I am Storage Blob Data Owner and Owner.

What am I doing wrong?


Solution

  • Please ensure that you have logged in first while you are performing the azcopy list operation .

    I tested the same scenario in my environment by creating a storage account , a private container with Azure AD authentication enabled and having owner and storage blob data owner role like below :

    enter image description here

    enter image description here

    enter image description here

    Output:

    The error only occurs when I have either logged out or haven't logged in to azcopy like below :

    enter image description here

    Update:

    If the above doesn't resolve the issue the you can use keyctl session workaroundSession first and then use azcopy login and other commands as mentioned in this GitHub Issue by John Rusk