> ## Documentation Index
> Fetch the complete documentation index at: https://api-reference.scale.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Azure Blob Storage

> Azure Blob Storage Azure Blob Storage Access If you use Azure Blob Storage, you can grant access to your Blob Storage resources by completing the Azure access delegation process. Scale has registered the Scale AI applica

# Azure Blob Storage

## **Azure Blob Storage Access**

If you use Azure Blob Storage, you can grant access to your Blob Storage resources by completing the Azure access delegation process. Scale has registered the Scale AI application as an Azure **[multi-tenant application](https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-convert-app-to-be-multi-tenant)** that can access resources in your Azure subscription on your behalf.

After completing the access delegation process, blob storage resource URIs (i.e. of the form `https://\{storageaccount\}.blob.core.windows.net/\{container\}/\{key\}`) will be fetched using the Scale AI service principal, and you will be able to submit blob URIs to the API that are not publicly accessible.

The process involves the following steps:

* **Consenting to grant Scale AI the permissions it requires to access resources in your subscription.**
* **Assigning the Scale AI app an appropriate role.**

### **Application Consent**

As an administrator or manager of your Scale AI team, go to the integrations tab in the **[settings page](https://dashboard.scale.com/settings)**, click the **Connect to Azure** button. Azure displays the resource permissions requested by the application.

<img src="https://mintcdn.com/scale-full-docs/AJGSK20C0uN_df4o/assets/basehub/v9vw83-eyJhbGciOiJIUzI1NiJ9.eyJvcmlnaW5VcmwiOiJodHRwczovL2ZpbGVzLnJlYWRtZS5pby80NDIyOTQ3LVNjcmVlbl9TaG90XzIwMjAtMDYtMTFfYXRfMi4yOS4wNV9QTS5wbmciLCJyZXBvSWQiOiJiN2U2Z2ozMjluenBuODF0bHNyYTU0bTIifQ.auf3uJQLVyDLufU6MTx85wfcAglOUuid1EzmweqPU30.png?fit=max&auto=format&n=AJGSK20C0uN_df4o&q=85&s=142961c7eeff915a57d388a139fa1245" alt="2368" width="2368" height="488" data-path="assets/basehub/v9vw83-eyJhbGciOiJIUzI1NiJ9.eyJvcmlnaW5VcmwiOiJodHRwczovL2ZpbGVzLnJlYWRtZS5pby80NDIyOTQ3LVNjcmVlbl9TaG90XzIwMjAtMDYtMTFfYXRfMi4yOS4wNV9QTS5wbmciLCJyZXBvSWQiOiJiN2U2Z2ozMjluenBuODF0bHNyYTU0bTIifQ.auf3uJQLVyDLufU6MTx85wfcAglOUuid1EzmweqPU30.png" />

Click **Accept** to allow Azure to grant permission to Scale AI to access resources in your subscription. You will still need to grant the application a role to access Blob Storage data. Note that after providing application consent, the Scale AI app will stop using anonymous credentials to fetch attachments sent in by your team.

### **Role-Based Access**

As part of the access delegation process, you must assign a role to the `Scale AI` application service principal to read data from your storage accounts. We recommend assigning the *Storage Blob Data Reader* role for the particular storage accounts or containers to retrieve data from. Alternatively, you can create a custom role that provides only the minimum permissions necessary. See the **[Azure](https://docs.microsoft.com/en-us/azure/storage/common/storage-auth-aad-rbac-portal?toc=/azure/storage/blobs/toc.json#assign-rbac-roles-using-the-azure-portal)**<br />**[docs](https://docs.microsoft.com/en-us/azure/storage/common/storage-auth-aad-rbac-portal?toc=/azure/storage/blobs/toc.json#assign-rbac-roles-using-the-azure-portal)** for instructions on how to assign the role.

### **Disconnecting from Azure**

To stop the Scale AI service principal from authenticating via Azure AD to access your user's storage accounts, use the **Unlink from Azure** button in the integrations tab in the settings page. Note that this does not revoke permissions from the Scale AI service principal in Azure, nor does it uninstall the Scale AI app from your subscription; those must done using the Azure portal or the Azure CLI.