Introduction - Document Details

About This Page

This page is part of the Azure documentation. It contains code examples and configuration instructions for working with Azure services.

View on GitHub 📚 View on Microsoft Learn

Bias Analysis

Detected Bias Types

windows_first

powershell_heavy

Summary

The documentation presents both Azure Portal (GUI), PowerShell, and Azure CLI instructions for key steps. However, PowerShell examples are given before Azure CLI, and there is no mention of Linux-specific tools or shell environments. PowerShell is a Windows-centric tool, and its precedence in the documentation may signal a Windows bias. There are no Bash or Linux shell script examples, nor any explicit references to Linux environments or considerations.

Recommendations

Alternate the order of PowerShell and Azure CLI examples, or present Azure CLI first, as it is cross-platform and widely used on Linux.
Explicitly mention that Azure CLI commands work on Linux, macOS, and Windows, and provide Bash script examples where appropriate.
Add notes or sections for Linux users, such as how to install and use Azure CLI on Linux, and clarify that PowerShell Core is available cross-platform if PowerShell examples are retained.
Consider including troubleshooting tips or environment-specific notes for Linux users, especially regarding authentication and permissions.
Avoid assuming Visual Studio usage, as it is primarily a Windows tool; mention alternatives like VS Code or command-line deployment for Linux/macOS users.

Create Pull Request

Scan History

Date	Scan	Status	Result
2026-01-12 00:00	#99	completed	Clean
2026-01-11 06:20	#98	completed	Clean
2026-01-11 00:00	#95	cancelled	Clean
2026-01-10 00:00	#92	completed	Clean
2026-01-09 00:00	#87	cancelled	Clean
2026-01-06 22:28	#78	completed	Clean
2025-12-29 18:00	#48	cancelled	Biased
2025-12-22 00:00	#24	cancelled	Clean
2025-12-15 00:00	#7	completed	Clean
2025-12-14 05:05	#6	completed	Clean

Flagged Code Snippets

Connect-AzAccount

$resourceGroup = "securewebappresourcegroup"
$location = "<location>"
$storageName="securewebappstorage"
$containerName = "securewebappblobcontainer"

$storageAccount = New-AzStorageAccount -ResourceGroupName $resourceGroup `
  -Name $storageName `
  -Location $location `
  -SkuName Standard_RAGRS `
  -Kind StorageV2

$ctx = $storageAccount.Context

New-AzStorageContainer -Name $containerName -Context $ctx -Permission blob

---

## Grant access to the storage account

You need to grant your web app access to the storage account before you can create, read, or delete blobs. In a previous step, you configured the web app running on App Service with a managed identity. Using Azure RBAC, you can give the managed identity access to another resource, just like any security principal. The Storage Blob Data Contributor role gives the web app (represented by the system-assigned managed identity) read, write, and delete access to the blob container and data.

> [!NOTE]
> Some operations on private blob containers are not supported by Azure RBAC, such as viewing blobs or copying blobs between accounts. A blob container with private access level requires a SAS token for any operation that is not authorized by Azure RBAC.  For more information, see [When to use a shared access signature](/azure/storage/common/storage-sas-overview#when-to-use-a-shared-access-signature).

# [Portal](#tab/azure-portal)

In the [Azure portal](https://portal.azure.com), go into your storage account to grant your web app access. Select **Access control (IAM)** in the left pane, and then select **Role assignments**. You'll see a list of who has access to the storage account. Now you want to add a role assignment to a robot, the app service that needs access to the storage account. Select **Add** > **Add role assignment** to open the **Add role assignment** page.

Assign the **Storage Blob Data Contributor** role to the **App Service** at subscription scope.  For detailed steps, see [Assign Azure roles using the Azure portal](/azure/role-based-access-control/role-assignments-portal).

Your web app now has access to your storage account.

# [PowerShell](#tab/azure-powershell)

Run the following script to assign your web app (represented by a system-assigned managed identity) the Storage Blob Data Contributor role on your storage account.