# Azure integration methods ## Integration methods After creating the storage account and a blob container, you can integrate them using one of two methods — **access keys** or a **shared access signature** (**SAS**): 1. **Access keys** provide full administrative access to your storage account, allowing any operation. They are suitable for scenarios requiring complete control but must be handled carefully due to their high level of access. 2. A **shared access signature** (**SAS**) offers more granular control, allowing access to specific resources for a limited time with restricted permissions. This method is ideal for scenarios where you need to grant a temporary access to clients or applications without exposing primary keys, enhancing security and flexibility in managing storage resources. *** ## SAS configuration Minimal required permissions to configure **Azure Blob Storage** for use with: 1. Allowed services: 1. **Blob** 2. Allowed resource types: 1. **Container** 2. **Objects** 3. Allowed permissions: 1. **Read** 2. **Write** 3. **Delete** 4. **List** {% hint style="warning" %} To use replication tasks when granting permissions, these permissions **must** either be full or extended with **Add** and **Create**. {% endhint %}

Example of correct permissions for Azure Blob Storage.

4. Allowed permissions for replication: * [x] **Read** * [x] **Write** * [x] **Delete** * [x] **List** * [x] **Add** * [x] **Create**

Example of correct replication permissions for Azure Blob Storage.

*** ## Generating the connection string ### Generating the connection string with the specified permissions 1. Login to the **Azure** portal as an administrator. 2. Select the storage account and click **Shared Access Signature** in the **Settings** tab. 3. Select the permissions described in the [SAS configuration](#shared_access_signature_configuration-1) section of this article. 4. Click **Generate SAS and connection string**.
5. For setting up the blob storage, you will need the connection string:
### Generating the connection string with the full permission 1. Login to the **Azure** portal as an administrator. 2. Select the storage account. 3. Go to **Access keys** under the **Security + networking** menu section.
4. For setting up the blob storage, you will need the connection string:
*** ## Useful links and items {% embed url="" %} {% embed url="" %}