Azure Files Access in Discovery Center

Azure Files is supported with Discovery Center through the use of the standard File System connector.  Both Identity and Storage Account based authentication are valid methods to authenticate, but have different setup instructions mentioned below.

Confirming Access

Before modifying Discovery Center we recommend mounting the share onto the Discovery Center host machine with the desired account to verify access. This step will help rule out any possible issues with network connectivity or security, permissions, or password anomalies.


Microsoft offers detailed instructions here on how to mount an Azure File share to a server.

https://docs.microsoft.com/en-us/azure/storage/files/storage-how-to-use-files-windows#mount-the-azure-file-share

 

Discovery Center Configuration

Identity-Based Authentication

For identity-based authentication you must configure permissions for the file share within the Azure environment. More information about how to configure access can be found here. https://docs.microsoft.com/en-us/azure/storage/files/storage-files-active-directory-overview#configure-share-level-permissions-for-azure-files 

Once the permissions are established for the credentialed account you can create the credentials in the System Settings of Discovery Center under Credential Management. The credentials for Identity-based authentication will be the user's standard domain account format.

If you grant access to the service account which runs the Discovery Center scheduler service, you do not need to create or specify credentials in the index as this works by default.


Storage Account Key Authentication

If using Storage Account Keys for authentication, you must create a credential in Discovery Center using the Username and Password type. For the username, it must be formatted with AZURE as the domain, and the Storage Account name as the username. ie. AZURE\StorageaccountName. The password must be the storage account key value.


Indexing

Identify the UNC path for the share, and add it to the Discovery Center Network map. Typical format:

\\<storageAccountName>.file.core.windows.net\<fileShareName>

Apply the relevant credential if necessary and you will be ready to index the location.