Answers: <p>For now there is no support for accessing Azure Table Storage with Managed Identities.</p>
  
  <p>Supported services are described here:</p>
  
  <ul>
  <li><a href="https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/services-support-managed-identities" rel="nofollow noreferrer">Services that support managed identities for Azure resources</a></li>
  </ul>
  
  <p>According to documentation, Azure Table Storage allows you to authenticate only by using account key. So SAS authentication is not solution here either.</p>
  
  <p>Possible solution could be like this:</p>
  
  <ol>
  <li>Create Azure Key Vault and store account key as a secret Assign</li>
  <li>permission to this key vault to your Managed Identity Use Managed</li>
  <li>Identity to fetch the key from key vault in a runtime </li>
  <li>Use the key to Azure Table Storage</li>
  </ol>
  
  <p>As additional step you can create separate Storage Account to store only tables. With this approach you should be able to restrict access to tables service properly.</p>
  
Answers: CC BY-SA 4.0
Answers: 2020-04-10T20:19:47.387Z
Answers: 2020-04-10T20:19:47.387Z
Answers: Paweł Tajs
Body: <p>I want to limit my user assigned MSI to be able to read and write tables only in a storage account. When assigning roles on IAM blade in the portal I don't see any table related roles. Why is that? I don't wanna use any SAS. </p>
  
  <p><a href="https://i.sstatic.net/nRWhY.png" rel="nofollow noreferrer"><img src="https://i.sstatic.net/nRWhY.png" alt="enter image description here"></a></p>
  
Tags: <azure><role-based-access-control>
Title: RBAC to secure Azure Table Storage access
UserDisplayName: UserControl
ThreadText: # RBAC to secure Azure Table Storage access
  
  (Asked by: username_0 on 2020-04-02)
  
  I want to limit my user assigned MSI to be able to read and write tables only in a storage account. When assigning roles on IAM blade in the portal I don't see any table related roles. Why is that? I don't wanna use any SAS.
  
  [![enter image description here](https://i.sstatic.net/nRWhY.png)](https://i.sstatic.net/nRWhY.png)
  
  **Tags:** azure, role-based-access-control
  
  
  ---
  
  ## 1 answers
  
  ### Answer by username_1 on 2020-04-10. Score: 2
  
  For now there is no support for accessing Azure Table Storage with Managed Identities.
  
  Supported services are described here:
  
  * [Services that support managed identities for Azure resources](https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/services-support-managed-identities)
  
  According to documentation, Azure Table Storage allows you to authenticate only by using account key. So SAS authentication is not solution here either.
  
  Possible solution could be like this:
  
  1. Create Azure Key Vault and store account key as a secret Assign
  2. permission to this key vault to your Managed Identity Use Managed
  3. Identity to fetch the key from key vault in a runtime
  4. Use the key to Azure Table Storage
  
  As additional step you can create separate Storage Account to store only tables. With this approach you should be able to restrict access to tables service properly.
  
  
  ---
  
  