Need help to connect to a azure blob storage using a sas token

[Brighton10]

Hi 

I am trying to get someone to only access a specific folder/files in my blob storage. So I have generated a Blob SAS token and Blob SAS Url. Since the url contains the Account name i can either put that or the url however the url gives a an error 

However when I only insert the blob storage endpoint it goes to the next stage as shown below.

From my understanding if someone has an account key they will have access to all the contents of that account. If I use anonymous then this error occurs. 

So is there a way to connect to the blob storage using sas token? Thanks for your assistance

[NirupamNishant]

As of 2023-August, for Blob Storage, we can use SAS connection.

You can get the Account Name and SAS token from the complete SAS URL. Note that the SAS token (secret) is the portion AFTER the question mark (?) in your SAS URL.

https://<AccountName>.blob.core.windows.net/?<SASToken>

Select the "Azure Blob Storage" connector.

Enter account name for your storage account.

Select SAS authentication and enter ONLY the SAS token (the portion after ? in your complete SAS URL)

The navigator should pop up and you can browse 🙂

NOTE: SAS generally are provisioned with an expiry date (can be seen in the SAS token). You will need to reenter the new SAS Token details once older one expired. You can edit the current connection from "Data source settings".

[Anonymous · Accepted solution]

Hi @Brighton10 ,

It seems that PBI does not officially support SAS token method of authentication.

Here are step-by-step processes talking about connecting to data housed in Azure Blob Storage from Power BI using a SAS token. You may kindly take a look at them:

Connecting to Blob Storage with a Shared Access Signature in Power BI | Microsoft Docs

Connecting to Azure Blobs in Power BI/

1. Launch Power BI and select "Get Data -> Web"
2. Switch to the "Advanced" view, and input the base URL in the first box, your copied query string in the second box.
3. Click "Add part" and enter "&restype=container&comp=list" in the third box (this is the directive that tells the rest endpoint to return a an enumeration of the blobs in the container.
4. Click "Ok", you will eventually be presented with a screen that shows a one row table being returned.  This is because the payload that comes back from the REST api is XML.  Click "Load"

             ......

In addition, an idea similar with your requirement has been raised, please upvote this feature request here:

Connect to Azure Tables via Shared Access Signatures

Best Regards,
Eyelyn Qin
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.