Microsoft Azure Administrator Associate AZ-104 Practice Question

To enable users to authenticate to an Azure Storage account using Microsoft Entra ID credentials, the administrator must assign appropriate built-in roles to the users at the storage account level or higher. This allows users to access the storage account based on their Microsoft Entra ID identities without the need to manage shared access signatures or access keys. Distributing access keys or SAS tokens directly to users is less secure and doesn't leverage Microsoft Entra ID's capabilities for centralized identity management. Client-side encryption is related to data protection but doesn't affect authentication methods.