Generally Available: Entra-only identities with Azure Files

Azure Files announces general availability of Entra-only identities for SMB access, enabling organizations to securely access file shares using cloud-native identities without requiring Active Directory or hybrid identity infrastructure. With Microsoft Entra ID as the authentication authority, users can access Azure Files using Kerberos-based authentication backed entirely by cloud identities - eliminating dependency on domain controllers and simplifying storage and identity architecture.

Key capabilities

• Cloud-native authentication with Entra ID: Secure SMB access using Kerberos without Active Directory or domain controllers
• Simplified permissions management: Configure granular NTFS ACLs for Entra users and groups directly through the Azure portal
• Role-based access control (RBAC): Assign share-level access using built-in roles for least-privilege administration
• Secure access from anywhere: Enable identity-based access over the internet without VPN dependencies
• Support for modern workloads: Power Azure Virtual Desktop (AVD), general-purpose file sharing, and distributed collaboration scenarios

Please reach out to azurefiles@microsoft.com if you have any questions about adopting Entra-only Identities for secure SMB access with Azure Files.

Learn more.