Permissions for @turbot/azure-storage
Taking a look at permissions and associated grant levels for each permission for Storage:
| Permission | Grant Level | Help |
|---|---|---|
| microsoft.resources/deployments/cancel/action | Operator | |
| microsoft.resources/deployments/delete | Operator | |
| microsoft.resources/deployments/operations/read | Metadata | |
| microsoft.resources/deployments/read | Metadata | |
| microsoft.resources/deployments/validate/action | Operator | |
| microsoft.resources/deployments/write | Operator | |
| microsoft.resources/providers/read | Metadata | |
| microsoft.resources/subscriptions/resourceGroups/read | Metadata | |
| microsoft.storage/checknameavailability/read | Operator | |
| microsoft.storage/locations/deletevirtualnetworkorsubnets/action | Admin | |
| microsoft.storage/operations/read | Metadata | |
| microsoft.storage/skus/read | Metadata | |
| microsoft.storage/storageaccounts/blobservices/containers/clearlegalhold/action | Operator | Clear blob container legal hold. |
| microsoft.storage/storageaccounts/blobservices/containers/delete | Operator | Returns the result of deleting a container. |
| microsoft.storage/storageaccounts/blobservices/containers/immutabilitypolicies/delete | Operator | Delete blob container immutability policy. |
| microsoft.storage/storageaccounts/blobservices/containers/immutabilitypolicies/extend/action | Operator | Extend blob container immutability policy. |
| microsoft.storage/storageaccounts/blobservices/containers/immutabilitypolicies/lock/action | Operator | Lock blob container immutability policy. |
| microsoft.storage/storageaccounts/blobservices/containers/immutabilitypolicies/read | Metadata | Get blob container immutability policy. |
| microsoft.storage/storageaccounts/blobservices/containers/immutabilitypolicies/write | Operator | Put blob container immutability policy. |
| microsoft.storage/storageaccounts/blobservices/containers/read | Metadata | Returns a container or a list of containers. |
| microsoft.storage/storageaccounts/blobservices/containers/setlegalhold/action | Operator | Set blob container legal hold. |
| microsoft.storage/storageaccounts/blobservices/containers/write | Operator | Returns the result of put or lease blob container. |
| microsoft.storage/storageaccounts/blobservices/providers/microsoft.insights/diagnosticsettings/read | Metadata | |
| microsoft.storage/storageaccounts/blobservices/providers/microsoft.insights/diagnosticsettings/write | Operator | |
| microsoft.storage/storageaccounts/blobservices/providers/microsoft.insights/metricdefinitions/read | Metadata | |
| microsoft.storage/storageaccounts/blobservices/read | Metadata | Returns blob service properties or statistics. |
| microsoft.storage/storageaccounts/blobservices/write | Operator | Returns the result of put blob service properties |
| microsoft.storage/storageaccounts/delete | Admin | |
| microsoft.storage/storageaccounts/fileServices/providers/microsoft.insights/diagnosticsettings/read | Metadata | |
| microsoft.storage/storageaccounts/fileServices/providers/microsoft.insights/diagnosticsettings/write | Operator | |
| microsoft.storage/storageaccounts/fileServices/providers/microsoft.insights/metricdefinitions/read | Metadata | |
| microsoft.storage/storageaccounts/fileservices/shares/delete | Admin | |
| microsoft.storage/storageaccounts/fileservices/shares/read | Metadata | |
| microsoft.storage/storageaccounts/fileservices/shares/write | Operator | |
| microsoft.storage/storageaccounts/fileservices/shares/action | Operator | |
| microsoft.storage/storageaccounts/listAccountSas/action | Operator | |
| microsoft.storage/storageaccounts/listkeys/action | Operator | |
| microsoft.storage/storageaccounts/listServiceSas/action | Operator | |
| microsoft.storage/storageaccounts/providers/microsoft.insights/diagnosticsettings/read | Metadata | |
| microsoft.storage/storageaccounts/providers/microsoft.insights/diagnosticsettings/write | Operator | |
| microsoft.storage/storageaccounts/providers/microsoft.insights/metricdefinitions/read | Metadata | |
| microsoft.storage/storageaccounts/queueservices/providers/microsoft.insights/diagnosticsettings/write | Operator | |
| microsoft.storage/storageaccounts/queueservices/providers/microsoft.insights/metricdefinitions/read | Metadata | |
| microsoft.storage/storageaccounts/queueservices/queues/delete | Operator | Returns the result of deleting a queue. |
| microsoft.storage/storageaccounts/queueservices/queues/read | Metadata | Returns a queue or a list of queues. |
| microsoft.storage/storageaccounts/queueservices/queues/write | Operator | Returns the result of writing a queue. |
| microsoft.storage/storageaccounts/queueservices/read | Metadata | Returns queue service properties or statistics. |
| microsoft.storage/storageaccounts/queueservices/write | Operator | Returns the result of setting queue service properties. |
| microsoft.storage/storageaccounts/read | Metadata | |
| microsoft.storage/storageaccounts/regeneratekey/action | Admin | |
| microsoft.storage/storageaccounts/services/diagnosticsettings/write | Operator | |
| microsoft.storage/storageaccounts/tableServices/providers/Microsoft.insights/diagnosticsettings/read | Metadata | |
| microsoft.storage/storageaccounts/tableServices/providers/Microsoft.insights/diagnosticsettings/write | Operator | |
| microsoft.storage/storageaccounts/tableServices/providers/Microsoft.insights/metricDefinitions/read | Metadata | |
| microsoft.storage/storageaccounts/write | Admin | |
| microsoft.storage/usages/read | Metadata |