AnalyticJeremy

# Create a User Delegated SAS Token (the hard way)

# If you need a user delegated SAS token, the easiest way to get one is to use:
#    az storage container generate-sas

# However, the CLI does not currently support all of the features of user delegated
# SAS tokens (like signedUnauthorizedObjectId).  If you want a SAS token with those
# features, you have to forge your own token.  This PowerShell script may help you
# get started

AnalyticJeremy

# Create a User Delegated SAS token

# Users who wishes to access a blob account must create a SAS token for themselves.
# The user must first be granted RBAC access to the files they need in the blob storage account.
# Then they can generate a SAS token that will represent their access.

# Note that the user must be a "Storage Blob Data Contributor" or a "Storage Blob Data Reader" at the storage account level (or higher)
# (After assigning a user to this role, it can take a few minutes for the permissions to propogate throughout the Azure backplane.)

# Reference:  https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-user-delegation-sas-create-cli

AnalyticJeremy

#------------------------------------------------------------------------------
# PowerShell commands that use Azure CLI to remove resource groups with a common
# prefix
#--------------------------------------------------------------------------------

# Make sure I'm in the right subscription...
az account show

# If I need to change subscriptions...
# az account set -s "<the right sub ID>"