User delegation SAS for Azure Tables, Azure Files, and Azure
Queues is now generally available.
User delegation SAS allows users to create a more secure SAS
token than account or service SAS by tying the SAS token to the delegator. This
extension of UDK SAS will allow users to set SAS tokens at the table, table
entity, queue, queue entity, file container, and individual file level. Any SAS
token set at the higher level will provide access to all table/queue/file
entities within, and any SAS token set at the base level will only provide
access to that individual entity.
There is no additional cost to use user delegation SAS.
Pricing is based on the standard read/write transaction costs for your storage
account type.
Learn more: