search

microsoft / storage-as-a-service

MIT License
12 stars 9 forks source link

Storage Blob Data permissions inherited to storage account don't affect listed storage accounts #142

Open SvenAelterman opened 2 years ago

SvenAelterman commented 2 years ago

Users who are assigned Storage Blob Data permissions at the resource group level or higher do not see those storage accounts in the list.

SvenAelterman commented 1 year ago

Confirmed that role assignments at resource group higher aren't processed correctly due to the lack of a storage account name in the scope path. Addressing this will require listing all storage accounts in a resource group or subscription (using Resource Graph) and then processing all those storage accounts.