You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Before you can do anything meaningful with AzCopy, you need to decide how you'll provide authorization credentials to the storage service.
47
+
> [!NOTE]
48
+
> As an owner of your Azure Storage account, you aren't automatically assigned permissions to access data. Before you can do anything meaningful with AzCopy, you need to decide how you'll provide authorization credentials to the storage service.
48
49
49
50
## Choose how you'll provide authorization credentials
50
51
@@ -62,31 +63,14 @@ Use this table as a guide:
62
63
63
64
The level of authorization that you need is based on whether you plan to upload files or just download them.
64
65
65
-
#### Authorization to upload files
66
-
67
-
Verify that one of these roles has been assigned to your identity:
68
-
69
-
-[Storage Blob Data Contributor](https://docs.microsoft.com/azure/role-based-access-control/built-in-roles#storage-queue-data-contributor)
70
-
-[Storage Blob Data Owner](https://docs.microsoft.com/azure/role-based-access-control/built-in-roles#storage-blob-data-owner)
71
-
72
-
These roles can be assigned to your identity in any of these scopes:
73
-
74
-
- Container (file system)
75
-
- Storage account
76
-
- Resource group
77
-
- Subscription
78
-
79
-
To learn how to verify and assign roles, see [Grant access to Azure blob and queue data with RBAC in the Azure portal](https://docs.microsoft.com/azure/storage/common/storage-auth-aad-rbac-portal?toc=%2fazure%2fstorage%2fblobs%2ftoc.json).
80
-
81
-
You don't need to have one of these roles assigned to your identity if your identity is added to the access control list (ACL) of the target container or directory. In the ACL, your identity needs write permission on the target directory, and execute permission on container and each parent directory.
66
+
#### Authorization to download files
82
67
83
-
To learn more, see [Access control in Azure Data Lake Storage Gen2](https://docs.microsoft.com/azure/storage/blobs/data-lake-storage-access-control).
68
+
#### Authorization to upload files
84
69
85
-
#### Authorization to download files
70
+
If you just want to download files, then verify that the [Storage Blob Data Reader](https://docs.microsoft.com/azure/role-based-access-control/built-in-roles#storage-blob-data-reader) has been assigned to your identity.
86
71
87
-
Verify that one of these roles has been assigned to your identity:
72
+
If you want to upload files, then verify that one of these roles has been assigned to your identity:
88
73
89
-
-[Storage Blob Data Reader](https://docs.microsoft.com/azure/role-based-access-control/built-in-roles#storage-blob-data-reader)
90
74
-[Storage Blob Data Contributor](https://docs.microsoft.com/azure/role-based-access-control/built-in-roles#storage-queue-data-contributor)
91
75
-[Storage Blob Data Owner](https://docs.microsoft.com/azure/role-based-access-control/built-in-roles#storage-blob-data-owner)
92
76
@@ -99,7 +83,7 @@ These roles can be assigned to your identity in any of these scopes:
99
83
100
84
To learn how to verify and assign roles, see [Grant access to Azure blob and queue data with RBAC in the Azure portal](https://docs.microsoft.com/azure/storage/common/storage-auth-aad-rbac-portal?toc=%2fazure%2fstorage%2fblobs%2ftoc.json).
101
85
102
-
You don't need to have one of these roles assigned to your identity if your identity is added to the access control list (ACL) of the target container or directory. In the ACL, your identity needs read permission on the target directory, and execute permission on container and each parent directory.
86
+
You don't need to have one of these roles assigned to your identity if your identity is added to the access control list (ACL) of the target container or directory. In the ACL, your identity needs write permission on the target directory, and execute permission on container and each parent directory.
103
87
104
88
To learn more, see [Access control in Azure Data Lake Storage Gen2](https://docs.microsoft.com/azure/storage/blobs/data-lake-storage-access-control).
105
89
@@ -111,6 +95,14 @@ After you've verified that your identity has been given the necessary authorizat
111
95
azcopy login
112
96
```
113
97
98
+
If you belong to more than one organization, include the tenant ID of the organization to which the storage account belongs.
99
+
100
+
```azcopy
101
+
azcopy login --tenant-id = <tenant-id>
102
+
```
103
+
104
+
Replace the `<tenant-id> placeholder with the tenant ID of the organization to which the storage account belongs. To find the tenant ID, select **Azure Active Directory > Properties > Directory ID** in the Azure portal.
105
+
114
106
This command returns an authentication code and the URL of a website. Open the website, provide the code, and then choose the **Next** button.
115
107
116
108
@@ -143,51 +135,30 @@ To find example commands, see any of these articles.
143
135
144
136
## Use AzCopy in a script
145
137
146
-
The version of azCopy that you download by using the `https://aka.ms/downloadazcopy-v10-linux` or `https://aka.ms/downloadazcopy-v10-windows` link will be updated over time. The link remains the same, but the target of the link will point to new versions of AzCopy over time.
147
-
148
-
If your script downloads AzCopy by using either of these links, it could encounter issues if these links lead to new versions of AzCopy that contain changes that are not compatible with your script.
138
+
Over time, the links presented in the [download section](#download-and-install-azcopy) of this article will point new versions of AzCopy. Scripts that download AzCopy by using these links might encounter issues if new versions of AzCopy remove or change features that your script depends upon.
149
139
150
-
You can avoid these issues by obtaining a version-specific link to AzCopy. That way, your script downloads the same exact version of AzCopy each time that it runs.
140
+
To avoid these issues, obtain a static (un-changing) link to the current version of AzCopy. That way, your script downloads the same exact version of AzCopy each time that it runs.
> `--strip-components=1` on the `tar` command removes the top-level folder that contains the version name, and instead extracts the binary directly into the current folder. This allows the script to be updated with a new version of `azcopy` by only updating the `wget` URL.
150
+
> For Linux, `--strip-components=1` on the `tar` command removes the top-level folder that contains the version name, and instead extracts the binary directly into the current folder. This allows the script to be updated with a new version of `azcopy` by only updating the `wget` URL.
180
151
181
-
### Windows
152
+
The Url appears in the output of this command. Your script can then download AzCopy by using that URL.
If you want to leverage the performance advantages of AzCopy, but you prefer to use Storage Explorer rather than the command line to interact with your files, then enable AzCopy in Storage Explorer.
161
+
If you want to leverage the performance advantages of AzCopy, but you prefer to use Storage Explorer rather than the command line to interact with your files, then enable AzCopy in Storage Explorer. Storage Explorer uses your account key to perform operations so you won't need to provide additional authorization credentials beyond logging into Storage Explorer.
191
162
192
163
In Storage Explorer, choose **Preview**->**Use AzCopy for Improved Blob Upload and Download**.
0 commit comments