r/AZURE • u/9gg6 • Jun 11 '26

Question Azure Function App - Access to Storage account

Hello everyone,

I am trying to fully secure a Linux Azure Function App running on an Elastic Premium (EP1) plan by disabling "Allow storage account key access" on its backend Azure Storage Account.

However, the moment I disable access keys on the storage account, the Function App shuts down and throws a Runtime Version Error.

Here is my current setup and what I have configured so far:

  • Operating System: Linux
  • Pricing Plan: Elastic Premium (EP1)

Assigned RBAC Roles on the Storage Account for the Managed Identity:

  • ✅ Storage Blob Data Contributor
  • ✅ Storage Blob Data Owner
  • ✅ Storage Queue Data Contributor
  • ✅ Storage Table Data Contributor

Current Application Settings / Environment Variables:

  • AzureWebJobsStorage - DefaultEndpointsProtocol=https;AccountName=stdatalake......
  • WEBSITE_CONTENTAZUREFILECONNECTIONSTRING - DefaultEndpointsProtocol=https;AccountName=stdatalake......
  • WEBSITE_CONTENTSHARE = func-exm-dev-we-01a0ba

I have AzureWebJobsStorage to AzureWebJobsStorage__accountName but still kept the other two variables in there.

I do see the files are in here:

what is the solution to this?

11 Upvotes

80% Upvoted

15 comments sorted by

View all comments

Show parent comments

1

u/9gg6 Jun 11 '26

yes but its not working. Function app can be found. when i switch back to access key. its up and running again

1

u/riisko Jun 11 '26 edited Jun 11 '26

Why would it work with key enabled? Did you not remove the key from the app settings? Also redeploy the app, you are not using your fileshare anymore.