Generally Available: Managed Identity Support for Azure Files SMB Is now GA

Azure Files now supports Managed Identities for SMB access, enabling applications and services to authenticate without storing static credentials or account keys. This feature aligns with Zero Trust principles, allowing workloads to use Entra-issued tokens for secure, short-lived access to file shares.

By leveraging Managed Identities, organizations can eliminate service principal secrets and reduce credential sprawl, simplifying compliance and improving security posture.

This capability is especially impactful for cloud-native workloads that require persistent storage, including:

• AKS clusters with persistent volumes with managed and workload identities
• CI/CD pipelines and automation scripts
• Native Application or VM (device) identity access

Managed Identities provide seamless integration with Azure RBAC, enabling fine-grained access control and centralized policy enforcement without manual key rotation. Please reach out to azurefiles@microsoft.com or customers interested in adopting Managed Identities for secure SMB access with Azure Files.

Learn more.