Microsoft Azure Storage: redundancy, access tiers, data access and 403 errors
For admins and technicians who look after Azure storage accounts and the apps and people that use them. Learn how redundancy options and blob access tiers really behave (including early deletion and archive rehydration), the difference between managing a storage account and reading its data, how account keys, shared access signatures and Microsoft Entra ID authorization fit together, how to work through the 403 errors Microsoft's troubleshooting article documents most, and how soft delete and versioning protect against mistakes. Concepts and vocabulary come from Microsoft Learn; menus move, so confirm details in current documentation.
- Level
- Intermediate
- Length
- About 50 minutes
- Contents
- 3 lessons · 1 video · final exam
- Status
- Published · updated 2 Oct 2026
- Microsoft Azure
Skills you'll practise
- Choose a redundancy option for a requirement and explain why redundancy doesn't protect against deletes or overwrites
- Predict the effect of blob access tiers, early deletion and archive rehydration priority on a request
- Explain why a management role such as Owner doesn't by itself grant blob data access through Microsoft Entra ID, and assign the right data role
- Diagnose a 403 error from its error code: network rules, missing permissions, or an invalid key or SAS
- Recommend user delegation SAS, key rotation and disallowing Shared Key where appropriate
- Configure blob soft delete, container soft delete and versioning to cover the recovery scenarios a customer needs
Course outline
- 1.Azure Storage: redundancy, tiers, access and 403 errorsVideo · 2 min
- 2.Redundancy, access tiers and the archiveLesson · 16 min
- 3.Who can read the data: keys, SAS and Microsoft Entra IDLesson · 17 min
- 4.403 errors and data protectionLesson · 17 min
- 5.Microsoft Azure Storage: redundancy, access tiers, data access and 403 errors: knowledge checkKnowledge check · 16 questions
- 6.Final exam10 questions · passing it completes the course, so people who already know the material can test out
Sources it draws on
The lessons and questions are written from these references, so learners can go back to the original.
- Microsoft Learn: Azure Storage redundancy
- Microsoft Learn: Access tiers for blob data
- Microsoft Learn: Blob rehydration from the archive tier
- Microsoft Learn: Azure Blob Storage lifecycle management overview
- Microsoft Learn: Authorize access to data in Azure Storage
- Microsoft Learn: Authorize access to blobs using Microsoft Entra ID
- Microsoft Learn: Choose how to authorize access to blob data in the Azure portal
- Microsoft Learn: Assign an Azure role for access to blob data
- Microsoft Learn: Manage storage account access keys
- Microsoft Learn: Grant limited access to Azure Storage resources using shared access signatures (SAS)
- Microsoft Learn: Prevent Shared Key authorization for an Azure Storage account
- Microsoft Learn: Remediate anonymous read access to blob data (Azure Resource Manager deployments)
- Microsoft Learn: Azure Storage firewall rules
- Microsoft Learn: Troubleshoot 403 errors in Azure Blob Storage
- Microsoft Learn: Soft delete for blobs
And 3 more.
See it with your own jobs and topics
Tell us about your team and we'll walk you through setup, from choosing jobs to your first skills check.