Enable Permissions for Blob Storage Containers

CloudCheckr can provide additional information and functionality when you add additional permissions to your subscription or resource. Here is a complete list of permissions separated by Azure service.

Storage Accounts

This permission will provide additional details in the List of Blob Storage Report.


To view additional information about your Blob Storage Containers in CloudCheckr, each Storage Account needs the Storage Account Contributor role. When a subscription is added to the application, CloudCheckr adds the Reader role by default, which allows CloudCheckr to view Azure resources. The Storage Account Contributor role provides CloudCheckr with additional details about the Storage Account resources.

  1. Login to the Azure Portal at https://portal.azure.com.
  2. Select Storage Accounts. You may need to click More Services from the  main blade menu.
  3. Select the desired storage account.
  4. When the Storage Account blade opens, select Access Control (IAM).
  5. Select the  checkbox next to the CloudCheckr role, and click Roles.
  6. In the Roles blade, click Storage Account Contributor.
  7. In the Storage Account Contributor blade, ensure that the CloudCheckr role has the Storage Account Contributor role selected. The access should indicate Inherited.

Once you have added the role of Storage Account Contributor role to the desired storage accounts, go the Reports Updated in the subscription or MAV and click Update Now. CloudCheckr will update the inventory reports for the subscription(s) and reports will update accordingly.

How did we do?