Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

BlobService check requires Storage Account Owner permissions #783

Open
richardjharding opened this issue Jun 3, 2021 · 2 comments
Open
Labels

Comments

@richardjharding
Copy link

Make the call to Get Blob Service Properties optional - perhaps based on the Options object used in this check

As currently implemented this line

var serviceProperties = await blobServiceClient.GetPropertiesAsync(cancellationToken);

Seems to require a high level of authorisation - according to the ms docs it needs storage account owner role - https://docs.microsoft.com/en-us/rest/api/storageservices/get-blob-service-properties#authorization

In my case I was looking to limit the necessary permissions for my app to just those required to access the blob container but adding this health check means I need to grant excessive permissions (imho :))

@Meertman
Copy link
Contributor

We had the same problem when using the health checks in an enterprise context. The account used by our application does not have the storage account owner permission, but we would like to perform the health check.

@MrKevHunter
Copy link
Contributor

Any idea when this will be merged, the PR looks good?

Nisden pushed a commit to Nisden/AspNetCore.Diagnostics.HealthChecks that referenced this issue Feb 16, 2022
Nisden pushed a commit to Nisden/AspNetCore.Diagnostics.HealthChecks that referenced this issue Feb 17, 2022
@sungam3r sungam3r added the azure label Jul 22, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

4 participants