Azcopy error "This request is not authorized to perform this operation."

TA Hyouno

08 May 2020, 07:07 UTC

49.9K views1

I copied a container to another storage account based on the document linked below. (DataLake Storage Gen2).

When trying, I got the following error:

this request not authorized to perform this operations using this permission

https://learn.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-v10

1,583 following

1 answer

Accepted answer · original discussion

11ohina017

12 May 2020, 19:07 UTC

Permalink

The SAS token has probably expired.

Your perspective belongs here.

Join the conversation

2 question comments

Use comments to ask for clarification. Post a solution as an answer.

Gaurav MantriPermalink

09 May 2020, 19:07 UTC

Please edit your question and include the exact azcopy command you're using (obfuscate secret things like account key etc. obviously).

Jim XuPermalink

11 May 2020, 07:07 UTC

Could you please which type of authorization credentials(learn.microsoft.com/en-us/azure/storage/common/…‌) you use?

Keep exploring this topic

Retrieve storage account access keys from a bicep module

is it possible to retrieve a Storage Account's Access Key when deploying the Storage Account via a Bicep module? My parent bicep creates a storage account using a module file, and it then needs an Access Key but I cannot get it working in a way that's secure: Parent Bicep module functionAppStorageModule 'storage-account.bicep' = { name:

Authenticating my Azure account opens a localhost webpage with invalid security

I've been using Azure Storage Explorer for a few years without any problems. This morning I opened it and was told that I needed to reauthenticate, so I clicked the Reauthenticate now link. This window opened... At the same time a browser window opened with a URL which begins... https://localhost:61204/?code= ... and this is displayed...

User delegation key vs account key - security?

In Microsoft's documentation for user delegation key, it says: A SAS token for access to a container, directory, or blob may be secured by using either Azure AD credentials or an account key. A SAS secured with Azure AD credentials is called a user delegation SAS. Microsoft recommends that you use Azure AD credentials when possible as a s

Azure Storage restrict access one container only

This is my situation: Two groups in Azure AD. Group 1 can access only container1, but not container2 Group 2 can access only container2, but not container1 To achieve this I have given IAM Role Permission on each container accordingly (assigned Storage Blob Data Contributor Role to group). Code Sample I used: https://github.com/Azure-Samp