CLI¶

# list storage accounts
az storage account list -o table
# show storage account properties
az storage account show --name <account-name> --resource-group <resource-group>
# get storage account id
az storage account show --name <account-name> --resource-group <resource-group> --query id
# check has public access or not
az storage account show --name <account-name> --resource-group <resource-group> --subscription <sid>--query allowBlobPublicAccess
# update storage account property
az storage account update --name <account-name> --resource-group <resource-group> --allow-cross-tenant-replication false
# list role assignments
az role assignment list --scope <storage-account-id> --query [].id

# list storage containers
az storage container list --account-name <account-name> -o table --auth-mode login
# show storage container properties
az storage container show --name <container-name> --account-name <storage-account> --auth-mode login
# list role assignment
az role assignment list --scope <storage-account-id>/blobServices/default/containers/<container-name>