[Storage] ErrorCode: AuthorizationPermissionMismatch when access azure queue with aad auth

Hello, we are trying to use aad auth of a service principal to connect an azure queue.

I am following the sample code using QueueServiceClient.

            // Create a client that can authenticate using our token credential
            QueueServiceClient service = new QueueServiceClient(new Uri("https://speaker0reco0westus0dev2.queue.core.windows.net"), credential);

            // Make a service request to verify we've successfully authenticated
            var response = service.GetProperties();

            var queueClient = service.CreateQueue("testqueue2").Value;
            queueClient.SendMessage("abc");

service.GetProperties() returns 200 and CreateQueue() call succeeded, I can see the queue was created in the storage account. but the SendMessage() call failed with 403. “'This request is not authorized to perform this operation using this permission.”

I have added the Azure Storage API permission in the service principal and also added the service principal as an owner in the storage account owner list.

Could anyone let me know what I am missing here?

Thanks

Hua

[rgrace-puck]

For posterity, the 403 error was happening because I’m trying to access tags on the blobs. This operation requires the “Storage Blob Data Owner” role for some reason. After assigning the role, everything works fine.

https://learn.microsoft.com/en-us/azure/storage/blobs/storage-blob-index-how-to?tabs=azure-portal#get-set-and-update-blob-index-tags

[amnguye]

Issue not caused by the storage SDK. Also the OP did not respond to my first response. Closing issue.