I am not allowed access to the blob storage that I created.

Question

Hello,

I'm trying to use the "document translator" feature in Azure. In step 1, it asked me to create a blob storage, which I did. Now when I go to select the storage account, it prompts that "The user must have "Storage Blob Data Contributor" role in the Azure Blob storage account to run document translation jobs ".

.

.

When i try to check the role status, it says I have "contributor" level access. (see attached)

Pls help me understand where exactly I might be going wrong. If I create the Storage account, shouldn't I have access to it as well?

Answer 1

if you created the Storage Account, you should typically have access.  However, Azure Contributor role does not include "Storage Blob Data Contributor", which is specifically needed for data-level access to blobs. Here’s what you can do 

• Go to Azure Portal → Azure Portal
• Navigate to your Storage Account → Open the storage account you created.
• Access IAM (Access Control)
• Click Access Control (IAM) from the left panel.
• Click on Role Assignments to see what roles you have.  Assign "Storage Blob Data Contributor" role
• Click + Add → Add role assignment
• Search for "Storage Blob Data Contributor"
• Select it and assign it to your user account
• Click Save

Please don't forget to accept the answer if it helped to solve your issue.

Answer 2

Hi @KASUKURTI Monica ,

the Contributor role allows to manage the Storage Account resource only. This role doesn't allow to access the data stored in the Storage Account.

To access the data in a Storage Account you need one of these roles: Storage Blob Data Contributor , Storage Blob Data Reader , Storage Blob Data Owner.

In your scenario the user should be added to the Storage Blob Data Contributor role : Assign Azure roles using the Azure portal

---

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards

Andreas Baumgarten

Answer 3

Hello KASUKURTI Monica,

Greetings & Welcome to Microsoft Q&A forum! Thanks for posting your query!

To resolve the issue with accessing blob storage for the Document Translator feature in Azure, it is essential to ensure that your user account is assigned the "Storage Blob Data Contributor/Owner" role for the relevant storage account. While having "Contributor" level access provides certain permissions, it does not automatically grant the necessary permissions for blob storage operations.

Please follow these steps to assign the required role:

1. Navigate to the Azure portal and select the appropriate storage account.
2. In the left-hand menu, select Access Control (IAM).
3. Click on + Add, then select Add role assignment.
4. In the search box, type "Storage Blob Data Contributor" and select the role.
5. Assign this role to your user account or to the identity associated with your Document Translator resource.

By assigning the "Storage Blob Data Contributor" role, the required data-level access will be granted, allowing user to perform blob storage operations effectively

References:

• Managed identities for Azure AI Document Translation
• Role-based access control for Azure OpenAI Service

Please do not forget to "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.           

If you have any other questions or are still running into more issues, let me know in the "comments" and I would be happy to help you.