An administrator plans to copy files from an on-premises Linux server to a blob container named archives in an Azure storage account named stmigration2026. The storage account has its firewall configured to 'Enabled from selected virtual networks and IP addresses'. The administrator intends to use AzCopy and authenticate using a Microsoft Entra ID user account. Which two configuration steps must you perform to ensure the transfer succeeds? (Select two.)
- Add the public IP address of the on-premises Linux server to the firewall settings of the storage account.Answer
- Assign the Storage Blob Data Contributor role to the Microsoft Entra ID user account.Answer
- CAssign the Contributor role to the Microsoft Entra ID user account at the storage account scope.
- DEnable the 'Allow trusted Microsoft services to access this storage account' firewall bypass option.
Answer
To successfully transfer data using AzCopy with Microsoft Entra ID authentication to a firewall-secured storage account, you must add the public IP address of the on-premises Linux server to the storage firewall and assign the Storage Blob Data Contributor role to the Microsoft Entra ID user account.
To complete the upload, both network connectivity and data authorization must be resolved. Adding the public IP address of the on-premises Linux server to the storage firewall allows the AzCopy client to connect. Assigning the Storage Blob Data Contributor role to the Microsoft Entra ID user account provides the necessary data plane permissions to upload blobs.
Step-by-Step Solution
Key Concept
Authorizing AzCopy data transfers using Microsoft Entra ID and Storage Firewalls