Blob index tag [Values in key] not showing in ABAC condition editor
I am trying to implement ABAC on my Azure Blob Storage Account to enable some operations only if a blob index tag exists with a specific value on the blob. The problem I'm seeing is that the "Blob index tags [Values in key] option is not presented in the ABAC condition editor in the Azure Portal and adding it via the Code option always causes access failure.
I have verified by Storage Account prerequisites based on https://learn.microsoft.com/en-us/azure/role-based-access-control/conditions-prerequisites.
- I'm using GPv2 storage account
- hierarchical namespace is disabled
- SFTP is disabled
When I try to add a Storage Blob Data Contributor role to the Storage Account with a Condition the "Blob index tags [Values in key]" option is not present.
When trying with the Code editor it allows me to add an appropriate expression but I always get an 'unauthorized' error with this condition, even if I negate the expression.
How can I make this feature available?