Skip to content

Commit 9abeb8f

Browse files
Merge pull request #312424 from normesta/maintenance
Removing statement about service limitations of user delegation SAS
2 parents aacbda2 + bcec352 commit 9abeb8f

1 file changed

Lines changed: 4 additions & 5 deletions

File tree

articles/storage/common/storage-sas-overview.md

Lines changed: 4 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -7,8 +7,7 @@ author: normesta
77
ms.author: normesta
88
ms.service: azure-storage
99
ms.topic: concept-article
10-
ms.date: 11/21/2024
11-
ms.reviewer: dineshm
10+
ms.date: 02/27/2026
1211
ms.subservice: storage-common-concepts
1312
# Customer intent: As a cloud architect, I want to implement shared access signatures to securely delegate access to Azure Storage resources, so that I can maintain control over resource permissions and manage access efficiently across various client applications.
1413
---
@@ -34,13 +33,13 @@ Azure Storage supports three types of shared access signatures:
3433
3534
### User delegation SAS
3635

37-
A user delegation SAS is secured with Microsoft Entra credentials and also by the permissions specified for the SAS. A user delegation SAS is supported for Blob Storage and Data Lake Storage, and can be used for calls to `blob` endpoints and `dfs` endpoints. It's not currently supported for Queue Storage, Table Storage, or Azure Files.
36+
A user delegation SAS is secured with Microsoft Entra credentials and also by the permissions specified for the SAS. A user delegation SAS is supported for Blob Storage (including Data Lake Storage and `dfs` endpoints), Queue Storage, Table Storage, or Azure Files.
3837

3938
For more information about the user delegation SAS, see [Create a user delegation SAS (REST API)](/rest/api/storageservices/create-user-delegation-sas).
4039

4140
### Service SAS
4241

43-
A service SAS is secured with the storage account key. A service SAS delegates access to a resource in only one of the Azure Storage services: Blob storage (including Data Lake Storage and `dfs` endpoints), Queue storage, Table storage, or Azure Files.
42+
A service SAS is secured with the storage account key. A service SAS delegates access to a resource in only one of the Azure Storage services: Blob Storage (including Data Lake Storage and `dfs` endpoints), Queue Storage, Table Storage, or Azure Files.
4443

4544
For more information about the service SAS, see [Create a service SAS (REST API)](/rest/api/storageservices/create-service-sas).
4645

@@ -90,7 +89,7 @@ The following table summarizes how each type of SAS token is authorized.
9089

9190
| Type of SAS | Type of authorization |
9291
| --- | --- |
93-
| User delegation SAS (Blob Storage and Data Lake Storage only) | Microsoft Entra ID |
92+
| User delegation SAS | Microsoft Entra ID |
9493
| Service SAS | Shared Key |
9594
| Account SAS | Shared Key |
9695

0 commit comments

Comments
 (0)