StudyToCert

All certifications / Azure Administrator / Lessons

Microsoft Certified: Azure Administrator Associate AZ-104 · Domain 2: Implement and manage storage

Identity-based access for Azure Files (AD DS, Entra Domain Services, Entra Kerberos) with share-level RBAC and NTFS permissions

▶ Watch the overview video

Last reviewed September 30, 2026 · Leer en español

Azure Files offers managed file shares over SMB (Server Message Block), the same protocol Windows file servers use. You can mount a share with the storage account key, but that gives everyone who knows the key full access, like being administrator on the file server, and it cannot tell users apart. For a real file-server replacement you want users to sign in with their own identities and receive only the access they should have. That is identity-based authentication, and it relies on Kerberos tickets just like an on-premises Windows file share.

Free account

Keep reading for free

Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 7 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.

Sign up free Log in

Study Azure Administrator for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Open the Azure Administrator study plan