Azure Storage Blob access issue and not authorized to access while accessing blob container behind Firewall and network

Saurin Shah 0

I have one Azure Storage account with Public Blob access is disabled (Anonymous access denied) and we have allowed VNET and Firewall IP in networking to access our blob container and data which resides in , all time IP are are adding when it change and try to access Blob container from azure portal every time says you are not authorized to access this kindly check and allow IP in firewall , but IP is already there , we have tried to change ENABLE from ALL Network and then its working fine and able to access , but the thing is that even IP there why we cant access and even IP is not changed at that time

second we have RBAC assigned also storage blob contributor so that also not an issue , how to resolve please help on immediate basis like we need to keep with Vnet and IP add only for security reasons but from azure portal it saying same message You are not authorized , IP is already there and also need to access from azure portal please help

Nandamuri Pranay Teja 405 Reputation points Microsoft Vendor

2025-01-31T10:25:57.7666667+00:00
Hello Saurin Shah,

Welcome to Microsoft Q&A, thanks for posting your query.

I understand that you're having issues accessing an Azure Blob Storage account with public access disabled, even after allowing specific IP addresses and configuring Virtual Network (VNet) rules.

Firstly, verify your firewall configurations and ensure that the IP addresses utilized for accessing your blob container are incorporated within your firewall rules. This can be confirmed by accessing the "Firewalls and virtual networks" section in the Azure portal and checking that the relevant IP addresses are included. Ensure that your VNET is properly set up and that your blob container is reachable from within the VNET. This can be confirmed by checking that your VNET appears in the "Virtual networks" section of the "Firewalls and virtual networks" tab.

Make sure that to enable 'Allow Blob anonymous access' Post which ensures that the subnet within your VNet that is supposed to have access to the storage account is correctly configured and that the network security groups (NSGs) associated with that subnet allow the necessary traffic.Make sure that your connection string is correct and that it includes the necessary information to access your blob container. You can check this by navigating to the "Access keys" tab in the Azure portal and copying the connection string.

I understand that you have designated the storage blob contributor role; however, we kindly request that you verify the correct assignment of the RBAC role (Storage Blob Data Contributor) to the user or entity (such as a service principal) utilized for accessing the storage account. Ensure that the scope of the role assignment is correctly set to the specific storage account.

Additional information:

Sometimes the Azure portal might cache outdated information. Try clearing your browser's cache and cookies and then refreshing the page.

Visit the Azure Service Health dashboard to see if there are any known service outages or maintenance activities that might be impacting your storage account.

If you sill continues to experience the same error, kindly provide us with the information outlined below to proceed with the next action plan.

The exact error message you're receiving.

Screenshots of your firewall rules and RBAC assignments.

The results of any network diagnostics tests.

The time of occurrence of the issues.

Please let us know if you have any further queries. I’m happy to assist you further.
Saurin Shah 0 Reputation points

2025-01-31T13:54:26.19+00:00

First thing we have already allowed public IP in firewall section and same Vnet as I have mentioned

From my machine when I try to open azure portal and access blob container and files getting you are not authorised to perform kindly check ip is allowed in firewall, second thing we don't need to make Blob anonymous access enable aa it should be disabled and no one can acess an security reasons and only from allowed IP it should be accessible

Please help here secure solution

Share via

Azure Storage Blob access issue and not authorized to access while accessing blob container behind Firewall and network

Your answer