This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(9.6, 19%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMG%3C/text%3E%3C/svg%3E)
Is there any solution available in Azure (Storage account, VM, dedicated resource, 3rd party appliance) that will allow me to map a share on ONLY! Azure AD joined PC and will let me configure file/folder level permissions based on Azure AD accounts/groups?
An Azure service that offers file shares in the cloud.
Globally unique resources that provide access to data management services and serve as the parent namespace for the services.
A high-performance, durable block storage designed to be used with Azure Virtual Machines and Azure VMware Solution.
Hi everyone interested, looks like finally it's available:
and as I got info from MS there are chances to have the GA on December update- I keep my fingers crossed for that:)
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(192, 57.00000000000001%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ET%3C/text%3E%3C/svg%3E)
True, but only default share-level permissions are seemingly available for cloud-only identities for Kerberos.
Updating the thread: General Availability: Azure Active Directory Kerberos with Azure Files for hybrid identities
General Availability of Azure Files integration with Azure Active Directory (Azure AD) Kerberos for hybrid identities. With this release, identities in Azure AD can mount and access Azure file shares without the need for line-of-sight to an Active Directory domain controller.
This article focuses on enabling and configuring Azure Active Directory (Azure AD) for authenticating hybrid user identities, which are on-premises AD DS identities that are synced to Azure AD. Cloud-only identities aren't currently supported.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(259.20000000000005, 48%, 35%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EM%3C/text%3E%3C/svg%3E)
Will Cloud-only identities be supported in a future update? Thanks in advance!
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(54.400000000000006, 47%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJ%3C/text%3E%3C/svg%3E)
Also looking for an update on this. We want to use cloud-only identities to mount an Azure File Share, from a storage account that is setup for Azure AD DS auth.
Also wondering if/when Azure AD (DS) - only is going to happen.
Kind of mind-blowing that this is not available at the moment.
"You can use our cloud resources, but only if you also still have an on-premise environment!"
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(252.8, 30%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAB%3C/text%3E%3C/svg%3E)
CAn we get an update @Sumarigo-MSFT of if Azure AD cloud only identities will be supported? Really need this since the Onedrive Sync screws up Quickbooks Desktop files. Need a mounted drive that everyone accesses in real time and all users are cloud only and computers Azure AD joined..... any help here!
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(275.2, 2%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECL%3C/text%3E%3C/svg%3E)
@Sumarigo-MSFT There is an issue with your update. You state that share permissions no longer require line-of-sight to an on-prem active directory. What about folder/file level permissions? The guide you link to says that line-of-sight IS required.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(44.800000000000004, 33%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EE%3C/text%3E%3C/svg%3E)
Hi,
As many others here, are there any plans to rework Azure Files to support cloud only setups. In other words no AD, no AD DS but only Entra ID accounts and Intune enrolled devices.
I guess the SMB protocol is the limitation here but what everyone else is asking is an easy solution to get a "files-share" solution without the hassle of AD DS.
Looking at the Azure Updates no indications of it so another questions that pops up is if there are 3rd party options out there?