You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
title: 'Use Azure Storage Explorer with Azure Data Lake Storage Gen2'
3
-
description: Learn how to use Azure Storage Explorer to create a file system in an Azure Data Lake Storage Gen2 account, as well as a directory and a file. Next, you learn how to download the file to your local computer, and how to view all of the file in a directory.
3
+
description: Use the Azure Storage Explorer to manage directories and file and directory access control lists (ACL) in storage accounts that has hierarchical namespace (HNS) enabled.
4
4
author: normesta
5
5
ms.subservice: data-lake-storage-gen2
6
6
ms.service: storage
7
7
ms.topic: conceptual
8
-
ms.date: 11/19/2019
8
+
ms.date: 01/23/2019
9
9
ms.author: normesta
10
10
ms.reviewer: stewu
11
11
---
12
12
13
-
# Use Azure Storage Explorer with Azure Data Lake Storage Gen2
13
+
# Use Azure Storage Explorer to manage directories, files, and ACLs in Azure Data Lake Storage Gen2
14
14
15
-
In this article, you'll learn how to use [Azure Storage Explorer](https://azure.microsoft.com/features/storage-explorer/) to create a directory and a blob. Next, you learn how to download the blob to your local computer, and how to view all of the blobs in a directory. You also learn how to create a snapshot of a blob, manage directory access policies, and create a shared access signature.
15
+
This article shows youhow to use [Azure Storage Explorer](https://azure.microsoft.com/features/storage-explorer/) to create and manage directories, files, and permissions in storage accounts that has hierarchical namespace (HNS) enabled.
This quickstart requires that you install Azure Storage Explorer. To install Azure Storage Explorer for Windows, Macintosh, or Linux, see [Azure Storage Explorer](https://azure.microsoft.com/features/storage-explorer/).
19
+
> [!div class="checklist"]
20
+
> * An Azure subscription. See [Get Azure free trial](https://azure.microsoft.com/pricing/free-trial/).
21
+
> * A storage account that has hierarchical namespace (HNS) enabled. Follow [these](data-lake-storage-quickstart-create-account.md) instructions to create one.
22
+
> * Azure Storage Explorer installed on your local computer. To install Azure Storage Explorer for Windows, Macintosh, or Linux, see [Azure Storage Explorer](https://azure.microsoft.com/features/storage-explorer/).
22
23
23
24
## Sign in to Storage Explorer
24
25
25
-
On first launch, the **Microsoft Azure Storage Explorer - Connect** window is shown. While Storage Explorer provides several ways to connect to storage accounts, only one way is currently supported for managing ACLs.
26
+
When you first start Storage Explorer, the **Microsoft Azure Storage Explorer - Connect** window appears. While Storage Explorer provides several ways to connect to storage accounts, only one way is currently supported for managing ACLs.
26
27
27
28
|Task|Purpose|
28
29
|---|---|
29
-
|Add an Azure Account | Redirects you to your organizations login page to authenticate you to Azure. Currently this is the only supported authentication method if you want to manage and set ACLs. |
30
+
|Add an Azure Account | Redirects you to your organization's sign-in page to authenticate you to Azure. Currently this is the only supported authentication method if you want to manage and set ACLs.|
31
+
|Use a connection string or shared access signature URI | Can be used to directly access a container or storage account with a SAS token or a shared connection string. |
32
+
|Use a storage account name and key| Use the storage account name and key of your storage account to connect to Azure storage.|
30
33
31
34
Select **Add an Azure Account** and click **Sign in..**. Follow the on-screen prompts to sign into your Azure account.
32
35
@@ -38,41 +41,69 @@ When it completes connecting, Azure Storage Explorer loads with the **Explorer**
38
41
39
42
## Create a container
40
43
41
-
Blobs are always uploaded into a directory. This allows you to organize groups of blobs like you organize your files on your computer in folders.
42
-
43
-
To create a directory, expand the storage account you created in the proceeding step. Select **Blob container**, right-click and select **Create Blob container**. Enter the name for your container. When complete, press **Enter** to create the container. Once the blob directory has been successfully created, it is displayed under the **Blob container** folder for the selected storage account.
44
+
A container holds directories and files. To create one, expand the storage account you created in the proceeding step. Select **Blob Containers**, right-click and select **Create Blob Container**. Enter the name for your container. See the [Create a container](storage-quickstart-blobs-dotnet.md#create-a-container) section for a list of rules and restrictions on naming containers. When complete, press **Enter** to create the container. Once the container has been successfully created, it is displayed under the **Blob Containers** folder for the selected storage account.
44
45
45
-
46
+
46
47
47
-
## Upload blobs to the directory
48
+
## Create a directory
48
49
49
-
Blob storage supports block blobs, append blobs, and page blobs. VHD files used to back IaaS VMs are page blobs. Append blobs are used for logging, such as when you want to write to a file and then keep adding more information. Most files stored in Blob storage are block blobs.
50
+
To create a directory, select the container that you created in the proceeding step. In the container ribbon, choose the **New Folder** button. Enter the name for your directory. When complete, press **Enter**to create the directory. Once the directory has been successfully created, it appears in the editor window.
50
51
51
-
On the directory ribbon, select **Upload**. This operation gives you the option to upload a folder or a file.
52
+
52
53
53
-
Choose the files or folder to upload. Select the **blob type**. Acceptable choices are **Append**, **Page**, or **Block** blob.
54
+
## Upload blobs to the directory
54
55
55
-
If uploading a .vhd or .vhdx file, choose **Upload .vhd/.vhdx files as page blobs (recommended)**.
56
+
On the directory ribbon, chose the **Upload** button. This operation gives you the option to upload a folder or a file.
56
57
57
-
In the **Upload to folder (optional)** field either a folder name to store the files or folders in a folder under the directory. If no folder is chosen, the files are uploaded directly under the directory.
58
+
Choose the files or folder to upload.
58
59
59
-
60
+
60
61
61
62
When you select **OK**, the files selected are queued to upload, each file is uploaded. When the upload is complete, the results are shown in the **Activities** window.
62
63
63
64
## View blobs in a directory
64
65
65
66
In the **Azure Storage Explorer** application, select a directory under a storage account. The main pane shows a list of the blobs in the selected directory.
66
67
67
-
68
+
68
69
69
70
## Download blobs
70
71
71
-
To download blobs using **Azure Storage Explorer**, with a blob selected, select **Download** from the ribbon. A file dialog opens and provides you the ability to enter a file name. Select **Save** to start the download of a blob to the local location.
72
+
To download files by using **Azure Storage Explorer**, with a file selected, select **Download** from the ribbon. A file dialog opens and provides you the ability to enter a file name. Select **Save** to start the download of a file to the local location.
73
+
74
+
## Managing access
75
+
76
+
You can set permissions at the root of your container. To do so, you must be logged into Azure Storage Explorer with your individual account with rights to do so (as opposed to with a connection string). Right-click your container and select **Manage Permissions**, bringing up the **Manage Permission** dialog box.
77
+
78
+
79
+
80
+
The **Manage Permission** dialog box allows you to manage permissions for owner and the owners group. It also allows you to add new users and groups to the access control list for whom you can then manage permissions.
81
+
82
+
To add a new user or group to the access control list, select the **Add user or group** field.
83
+
84
+
Enter the corresponding Azure Active Directory (AAD) entry you wish to add to the list and then select **Add**.
85
+
86
+
The user or group will now appear in the **Users and groups:** field, allowing you to begin managing their permissions.
87
+
88
+
> [!NOTE]
89
+
> It is a best practice, and recommended, to create a security group in AAD and maintain permissions on the group rather than individual users. For details on this recommendation, as well as other best practices, see [best practices for Data Lake Storage Gen2](data-lake-storage-best-practices.md).
90
+
91
+
There are two categories of permissions you can assign: access ACLs and default ACLs.
92
+
93
+
***Access**: Access ACLs control access to an object. Files and directories both have access ACLs.
94
+
95
+
***Default**: A template of ACLs associated with a directory that determines the access ACLs for any child items that are created under that directory. Files do not have default ACLs.
96
+
97
+
Within both of these categories, there are three permissions you can then assign on files or directories: **Read**, **Write**, and **Execute**.
98
+
99
+
>[!NOTE]
100
+
> Making selections here will not set permissions on any currently existing item inside the directory. You must go to each individual item and set the permissions manually, if the file already exists.
101
+
102
+
You can manage permissions on individual directories, as well as individual files, which are what allows you fine grained access control. The process for managing permissions for both directories and files is the same as described above. Right-click the file or directory you wish to manage permissions on and follow the same process.
72
103
73
104
## Next steps
74
105
75
-
In this quickstart, you learned how to transfer files between a local disk and Azure Blob storage using **Azure Storage Explorer**. To learn about how to set ACLs on your files and directories, continue to our How-to on the subject.
106
+
Learn access control lists in Data Lake Storage Gen2.
76
107
77
108
> [!div class="nextstepaction"]
78
-
> [How to set ACLs on files and directories](data-lake-storage-how-to-set-permissions-storage-explorer.md)
109
+
> [Access control in Azure Data Lake Storage Gen2](https://docs.microsoft.com/azure/storage/blobs/data-lake-storage-access-control)
0 commit comments