Data-plane built-in role that can read, write and delete blobs and containers. Paired with Reader, it is the least privilege needed to upload through the portal.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Storage Blob Data Contributor in context, with comparison tables and the common traps.
Terms in this definition
- Role
How an actor normally or expectedly behaves, or the part a person takes in a process. A single actor may hold more than one role.
- CRUD
Shorthand for create, read, update and delete, the four basic things you do with data. Data-plane roles in Azure Cosmos DB, for instance, authorise those operations on items.
- Reader
Built-in Azure role for viewing resources only: it cannot modify or use them, for example by joining or associating them, and gives no keys or data access.
- Least privilege
The security practice of giving each task only the permissions it requires, scoped as narrowly as possible.