Microsoft Azure Administrator Associate AZ-104 Practice Question

To enable users to authenticate to an Azure Storage account using Azure Active Directory (Azure AD) credentials, the administrator must assign appropriate built-in roles to the users at the storage account level or higher. This allows users to access the storage account based on their Azure AD identities without the need to manage shared access signatures or access keys. Distributing access keys or SAS tokens directly to users is less secure and doesn't leverage Azure AD's capabilities for centralized identity management. Client-side encryption is related to data protection but doesn't affect authentication methods.