Muokkaa

Jaa

Allow multiple users to use a single storage account and file share

  • Artikkeli

By default, the storage resources created by Azure Cloud Shell are intended for a single user. A single-user deployment is the most secure configuration because each user can only access their own file share. However, you might have a need to allow multiple users access to a single deployment. To support access for multiple users, you need to make the following changes:

  • Increase the Azure File share quota
  • Assign roles to the users that allow access to the storage resources

Warning

Using the configuration steps in this article grants each user you configure access to the all the files in the file share. For the best security, create separate storage accounts and file shares for each user.

Increase File Share quota

The file share created by Cloud Shell has a 6-GiB quota limit. When a new user starts their first session, Cloud Shell creates a 5-GiB image (*.img) file in the file share. The first user uses up the quota limit. When a second user starts their session, they receive the 'ephemeral storage' error message because Cloud Shell is unable to create another 5-GiB image (*.img) file. Also, notice that Cloud Shell created a 0-byte image (*.img) file for the failed attempt.

To support multiple users, you need to increase the file share quota to accommodate the number of users that share the same storage account. Increase the quota by 5-GiB per user.

Use the following steps to change the file share quota:

  1. Sign in to the Azure portal.
  2. Use the search bar to find your storage accounts
  3. On the Storage accounts page, select the storage account that you're using for the Azure Cloud Shell environment and view the details.
  4. From the left-hand menu, expand Data storage and select File shares.
  5. Locate the file share that you're using for the Azure Cloud Shell environment.
  6. On the file share for Cloud Shell, select the triple-dot menu.
  7. Select Edit quota from the menu.
  8. Change the Quota amount to the desired size.
  9. Select OK to save the change.

Note

There's a 100-TiB size limit for the file share.

Assign roles to the users that allow access to the storage resources

To access the storage account and file share, each user needs to have the following role assignments:

  • Reader and Data Access or Storage Account Contributor
  • Storage File Data Privileged Contributor

Apply the roles on the storage account. The file share inherits the role assignments from the storage account.

Use the following steps to assign roles:

  1. Sign in to the Azure portal.
  2. Use the search bar to find your storage accounts
  3. On the Storage accounts page, select the storage account that you're using for the Azure Cloud Shell environment and view the details.
  4. From the left-hand menu, select Access Control (IAM).
  5. In the details pane, select the Role assignments tab.
  6. In the header menu, select + Add then select Add role assignment from the dropdown menu.
  7. Use the search field to search for Reader and Data Access and select it from the search results.
  8. Select Next on the bottom of the page to get to the Members tab.
  9. To add users to the role:
    1. Select + Select members.
    2. In the Select members pane, search for the user
    3. Select the user then use Select button at the bottom to add the user.
    4. Repeat the process for each user.
  10. After adding the users, select Next to go to the Review + assign tab.
  11. Repeat the process for the Storage File Data Privileged Contributor role.

Summary

In this article, you learned how to increase storage quotas for a file share and how to assign roles to users to allow access to storage resources in Azure.