I'm having some trouble with Azure Files and group permissions. I set up a new Azure Files instance using Kerberos Authentication and was testing it with an Entra Joined machine. For my test, I have an on-premises synced user with the SMB Contributor role on the share, and everything worked perfectly for that user. However, when I set up Entra groups for managing permissions, added those groups to the relevant SMB roles, and included my test user, I faced access issues after rebooting the test machine. I checked Kerberos tickets, and they seem fine, but I'm not able to access the share after these changes. I read that the groups need to be AD synced, so I enabled group writeback but then realized it's deprecated, so I switched to Cloud Sync. Now, I've got the cloud groups synced in AD, but I'm still having access issues. I even created a standard AD group and assigned it the SMB Contributor role after syncing, but nothing seems to work. Am I missing something? Any insights would be appreciated!
3 Answers
Make sure you've added the new group in the security properties of the share. It sounds like the NTFS permissions might not be set up correctly for the group. Remember, there's a two-tier access control system here: RBAC and NTFS permissions. Both need to be configured right for groups.
It sounds like you're doing everything by the book, but sometimes it can be just a small oversight. Have you double-checked that all security settings for the groups are properly configured? Also, verify that the NTFS permissions propagate correctly and that the group assignments are visible in the share properties.
When you're facing issues accessing the share, what specific error are you getting? That might give us a better clue about what's going wrong. I recommend checking the exact messages during the connection attempt as that might help pinpoint the problem.
Related Questions
How To Get Your Domain Unblocked From Facebook
How To Find A String In a Directory of Files Using Linux