Skip to content

Commit 0c98541

Browse files
Merge pull request #296950 from khdownie/patch-3
Update authorize-oauth-rest.md
2 parents 34e828c + 5c04273 commit 0c98541

File tree

1 file changed

+6
-4
lines changed

1 file changed

+6
-4
lines changed

articles/storage/files/authorize-oauth-rest.md

Lines changed: 6 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ description: Authorize admin-level read and write access to Azure file shares an
44
author: khdownie
55
ms.service: azure-file-storage
66
ms.topic: conceptual
7-
ms.date: 02/26/2025
7+
ms.date: 03/25/2025
88
ms.author: kendownie
99
ms.custom: devx-track-azurepowershell
1010
---
@@ -14,13 +14,15 @@ ms.custom: devx-track-azurepowershell
1414
Azure Files OAuth over REST enables admin-level read and write access to Azure file shares for users and applications via the [OAuth](https://oauth.net/) authentication protocol, using Microsoft Entra ID for REST API based access. Users, groups, first-party services such as Azure portal, and third-party services and applications using REST interfaces can now use OAuth authentication and authorization with a Microsoft Entra account to access data in Azure file shares. PowerShell cmdlets and Azure CLI commands that call REST APIs can also use OAuth to access Azure file shares. You must call the REST API using an explicit header to indicate your intent to use the additional privilege. This is also true for Azure PowerShell and Azure CLI access.
1515

1616
> [!IMPORTANT]
17-
> This article explains how to enable admin-level access to Azure file shares for specific [customer use cases](#customer-use-cases). If you're looking for a more general article on identity-based authentication for end users, see [Overview of Azure Files identity-based authentication options for SMB access](storage-files-active-directory-overview.md).
17+
> This article explains how to enable admin-level access to Azure file shares for specific [customer use cases](#customer-use-cases). If you're looking for a more general article on identity-based authentication for end users, see [Overview of Azure Files identity-based authentication for SMB access](storage-files-active-directory-overview.md).
1818
1919
## Limitations
2020

21-
Azure Files OAuth over REST only supports the FileREST Data APIs that support operations on files and directories. OAuth isn't supported on FilesREST data plane APIs that manage FileService and FileShare resources. These management APIs are called using the Storage Account Key or SAS token, and are exposed through the data plane for legacy reasons. We recommend using the control plane APIs (the storage resource provider - Microsoft.Storage) that support OAuth for all management activities related to FileService and FileShare resources.
21+
Authorizing file data operations with Microsoft Entra ID is supported only for REST API versions 2022-11-02 and later.
2222

23-
Authorizing file data operations with Microsoft Entra ID is supported only for REST API versions 2022-11-02 and later. See [Versioning for Azure Storage](/rest/api/storageservices/versioning-for-the-azure-storage-services).
23+
Azure Files OAuth over REST support for Azure Files REST data plane APIs that manage FileService and FileShare resources is available with REST API versions 2024-11-04 and later.
24+
25+
See [Versioning for Azure Storage](/rest/api/storageservices/versioning-for-the-azure-storage-services).
2426

2527
## Customer use cases
2628

0 commit comments

Comments
 (0)