Microsoft Azure Administrator Associate AZ-104 Practice Question

Enabling identity-based authentication on the storage account and assigning appropriate roles to users allows users to access the storage account using their existing credentials, managed via Azure Entra ID. This approach implements role-based access control (RBAC) for managing permissions and eliminates the need to distribute shared keys or Shared Access Signatures (SAS). Generating shared access tokens or distributing access keys still involves handling shared secrets, which the organization wants to avoid. Enabling anonymous access is insecure and does not restrict access to specific users.