# Not able to access Azure blob with service principal from ansible module azure\_rm\_storageblob

**URL:** <https://forum.ansible.com/t/not-able-to-access-azure-blob-with-service-principal-from-ansible-module-azure-rm-storageblob/30856>\
**Category:** Ansible Project\
**Tags:** azure, awx\
**Created:** [July 24, 2019, 7:14am UTC](https://forum.ansible.com/t/not-able-to-access-azure-blob-with-service-principal-from-ansible-module-azure-rm-storageblob/30856 "2019-07-24T07:14:27Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![iamlightsocialxen](https://avatars.discourse-cdn.com/v4/letter/i/ee59a6/32.png) [@iamlightsocialxen](https://forum.ansible.com/u/iamlightsocialxen)\
**Post date:** [July 24, 2019, 7:14am UTC](https://forum.ansible.com/t/not-able-to-access-azure-blob-with-service-principal-from-ansible-module-azure-rm-storageblob/30856/1 "2019-07-24T07:14:27Z")

</div>

Hello Experts ,

I am trying to download/upload blobs with ansible azure\_rm\_storageblob module in AWX ( I have tried in Ansible core too, got the same error) , and get below error

Error getting keys for account XXXXXXXXX - Azure Error: AuthorizationFailed\nMessage: The client ‘YYYYYYYYYYYYYYYYYYYYYY’ with object id ‘YYYYYYYYYYYYYYYYYYYYYYYYY’ does not have authorization to perform action ‘Microsoft.Storage/storageAccounts/listKeys/action’ over scope ‘/subscriptions/ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ/resourceGroups/RG-DataEngineering-Dev/providers/Microsoft.Storage/storageAccounts/XXXXXXXXXXXXXX’ or the scope is invalid. If access was recently granted, please refresh your credentials."

If I use the same service principal key in the python code , I am able to upload and download blobs without any error .

I am wondering , when using service pricipal authentication with Azure , why it is doing listKeys operation.

I hope someone will understand this issue or might have faced this, looking to hear back from them.

regards,  
Prakash.

---

<div class="post-metadata">

**Author:** ![iamlightsocialxen](https://avatars.discourse-cdn.com/v4/letter/i/ee59a6/32.png) [@iamlightsocialxen](https://forum.ansible.com/u/iamlightsocialxen)\
**Post date:** [August 2, 2019, 7:10am UTC](https://forum.ansible.com/t/not-able-to-access-azure-blob-with-service-principal-from-ansible-module-azure-rm-storageblob/30856/2 "2019-08-02T07:10:28Z")

</div>

Hello ,

Has anyone tried to implement/access azure storage with service principal or SAS key via ansible ?

Regards,  
Prakash.