Azure設定使用者角色指派只能查看特定的Blob，其餘的Blob清單不列出

Question

想請教怎麼針對使用者或者群組設定查看權限

目前設定 儲存體帳戶：讀者

容器：儲存體 Blob 資料擁有者

(

(

!(ActionMatches{'Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read'} AND NOT SubOperationMatches{'Blob.List'})

AND

!(ActionMatches{'Microsoft.Storage/storageAccounts/blobServices/containers/blobs/runAsSuperUser/action'})

)

OR

(

@Resource[Microsoft.Storage/storageAccounts/blobServices/containers:name] StringEquals 'blobs-example-container'

AND

@Resource[Microsoft.Storage/storageAccounts/blobServices/containers/blobs:path] StringStartsWith 'readonly/'

)

)

AND

(

(

!(ActionMatches{'Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read'} AND SubOperationMatches{'Blob.List'})

AND

!(ActionMatches{'Microsoft.Storage/storageAccounts/blobServices/containers/blobs/runAsSuperUser/action'})

)

OR

(

@Resource[Microsoft.Storage/storageAccounts/blobServices/containers:name] StringEquals 'blobs-example-container'

AND

@Request[Microsoft.Storage/storageAccounts/blobServices/containers/blobs:prefix] StringStartsWith 'readonly/'

)

)

---

以圖示中，想要讓使用者可以看到右邊logs資料夾，左邊Alpine可以看到、右邊Baker不列出，怎麼設定

1、儲存體帳戶：角色指派、條件

2、容器：角色指派、條件