of 26
You have an Azure storage account named storage1.
You need to ensure that a user named User1 can access storage1 only from January 1st to January 31st 2024.
What should you do?
Create a conditional access policy for User1
Provide User1 with a shared access signature (SAS)
Provide User1 with a storage1 access key
Use a condition when assigning User1 an RBAC role on storage1



Answer :

To ensure that User1 can access storage1 only from January 1st to January 31st, 2024, you can:

1. **Create a conditional access policy for User1:** This policy can restrict User1's access to storage1 based on specific conditions such as date and time. By setting the policy to allow access only between January 1st to January 31st, 2024, you can control the access period for User1 effectively.

2. **Provide User1 with a shared access signature (SAS):** You can generate a SAS token with an expiry date set to January 31st, 2024, granting User1 temporary access to storage1 within the specified time frame. This method offers time-limited access and helps enforce access restrictions.

3. **Use a condition when assigning User1 an RBAC role on storage1:** By incorporating conditions while assigning User1 a Role-Based Access Control (RBAC) role to storage1, you can define the access scope based on time. Setting conditions to allow access only during the specified period ensures that User1's access is limited to the required timeframe.

These methods provide ways to control and restrict User1's access to storage1 within the designated timeframe, ensuring security and compliance with the access requirements.