search

microsoft / AzureStorageExplorer

Easily manage the contents of your storage account with Azure Storage Explorer. Upload, download, and manage blobs, files, queues, tables, and Cosmos DB entities. Gain easy access to manage your virtual machine disks. Work with either Azure Resource Manager or classic storage accounts, plus manage and configure cross-origin resource sharing (CORS) rules.
Creative Commons Attribution 4.0 International
364 stars 85 forks source link

Unable to access storage account from VM when sas is disabled. #7999

Open Jayapriya-j opened 2 weeks ago

Jayapriya-j commented 2 weeks ago

Preflight Checklist

Storage Explorer Version

1.25.1

Regression From

No response

Architecture

i86

Storage Explorer Build Number

20220809

Platform

Windows

OS Version

No response

Bug Description

Unable to connect to storage account via storage explorer and browser in Azure VM when SAS is disabled. Required roles(storage blob contributor and contributor role) is already added for my identity. We are able to access other storage accounts where SAS is enabled.

Steps to Reproduce

  1. Launch storgae explorer
  2. expand blob containers
  3. unable to expand error - "message": "{\"message\":\"AADSTS53000: Device is not in required device state: compliant. Conditional Access policy requires a compliant device, and the device is not compliant. The user must enroll their device with an approved MDM provider like Intune.

Actual Experience

"message": "{\"message\":\"AADSTS53000: Device is not in required device state: compliant. Conditional Access policy requires a compliant device, and the device is not compliant. The user must enroll their device with an approved MDM provider like Intune.

Expected Experience

No response

Additional Context

No response

craxal commented 2 weeks ago

@Jayapriya-j It sounds like the storage account you're trying to access has disabled local auth (which includes auth based on keys and SAS). This is not a Storage Explorer bug. Your organization may have imposed certain requirements for accessing the storage account, which can include devices requirements. You will need to do as the error message suggests, which is to enroll your machine with your organization using Intune. I suggest contacting your administrator for details on your organization's requirements.