Starting with Azure Security Center for IoT, getting through Azure Security Lab, and now focusing on Azure Files, security was the main goal.

Azure Files is getting new security features

That’s why Microsoft just released a new set of security features to enhance the access control experience in Azure Files. The first of these new security features is Azure Active Directory Domain Service (Azure AD DS) that has authentication support for Server Message Block (SMB) access. Here’s how Microsoft describes Azure AD DS on their blog:

New changes brought to general availability

The next feature was first showcased at Ignite 2018, but back then it needed a command line tool named “icacls” that wasn’t easily discoverable or consistent with user behaviour. Now, viewing or modifying the permissions on a file or folder with Windows File Explorer has been massively improved. Once again, permission assignments for Azure Files is available and easier than ever. Finally, to simplify share level access management, three new built-in role-based access controls were added. The built-in controls are Storage File Data SMB Share Elevated Contributor, Contributor, and Reader. You’ll no longer have to create custom roles because you can use the built-in ones to grant share-level permissions for SMB access to Azure Files. And that’s not all, because the Azure team is already working on some new things: So keep an eye out for new features and services in the future.

Name * Email * Commenting as . Not you? Save information for future comments
Comment

Δ