List of permissions set on a file or folder; examples include the POSIX-style lists in ADLS Gen2 and NTFS lists on Azure Files. Attribute conditions cannot be expressed in them.
Also called access control list.
Read more: Microsoft Learn
In the Ultra Transcenders books
AZ-305DP-900DP-750AB-900SC-300AZ-802DP-600DP-700DP-800
Each book explains ACL in context, with comparison tables and the common traps.
Terms in this definition
- List
Permission on Key Vault secrets allowing a caller to enumerate those in a vault, though their values are not returned.
- AGDLP
Nesting pattern: users go into global groups, which go into domain local groups, which receive the permissions. AGUDLP adds universal groups for forests with several domains.
- Set
Secret permission in Key Vault for writing secrets; some older material refers to it as Create.
- ADLS Gen2
Short for Azure Data Lake Storage Gen2: a standard GPv2 account with hierarchical namespace turned on, so analytics workloads get true directories and POSIX-style ACLs.
- NTFS
NT File System, the Windows file system; Azure Files honours its ACLs.
- Azure Files
Azure's managed file shares over SMB or NFS. There is no Archive tier, and a single encryption key applies across the whole storage account.
Related terms
- POSIX
Family of Unix standards; Azure Data Lake Storage Gen2 bases its access control list permission model on it.