Blob index tag [Values in key] not showing in ABAC condition editor

Jeff Jones 0 Reputation points
2025-02-27T19:42:59.42+00:00

I am trying to implement ABAC on my Azure Blob Storage Account to enable some operations only if a blob index tag exists with a specific value on the blob. The problem I'm seeing is that the "Blob index tags [Values in key] option is not presented in the ABAC condition editor in the Azure Portal and adding it via the Code option always causes access failure.

I have verified by Storage Account prerequisites based on https://learn.microsoft.com/en-us/azure/role-based-access-control/conditions-prerequisites.

  1. I'm using GPv2 storage account
  2. hierarchical namespace is disabled
  3. SFTP is disabled

When I try to add a Storage Blob Data Contributor role to the Storage Account with a Condition the "Blob index tags [Values in key]" option is not present.

ABAC_editor_no_blob_index_tags

When trying with the Code editor it allows me to add an appropriate expression but I always get an 'unauthorized' error with this condition, even if I negate the expression.

ABAC_editor_blob_index_tag_in_code

How can I make this feature available?

Azure Storage Accounts
Azure Storage Accounts
Globally unique resources that provide access to data management services and serve as the parent namespace for the services.
3,393 questions
0 comments No comments
{count} votes

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.