This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(147.20000000000002, 93%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ED%3C/text%3E%3C/svg%3E)
I'm trying to get usage metrics from trusted monitoring so I can monitor usage before we hit the monthly cap and start being billed extra.
I am following the instructions to store logs from trusted signing within the Azure storage account as defined here - https://zcusa.951200.xyz/en-us/azure/trusted-signing/how-to-sign-history.
When I get to the last step:
I get:
This request is not authorized to perform this operation.
Why? I'm using the same account to create the storage account that I also used to create the trusted signing account and add the diagnostic setting, so why can't I view the logs?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(57.599999999999994, 31%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EVK%3C/text%3E%3C/svg%3E)
Hi Dave,
Welcome to Microsoft Q&A, thanks for posting your query.
The error message you got "This request is not authorized to perform this operation" indicates that the account you are using doesn't have the permission to access the container in the azure storage account, even you are using same storage account you need to setup the storage and trusted signing account. Here are some possible reasons for this issue.
When you create an Azure Storage account, you are not automatically assigned permissions to access data via Microsoft Entra ID. You must explicitly assign yourself an Azure role for access to Blob Storage. You can assign it at the level of your subscription, resource group, storage account, or container.
Make sure that your account has the necessary permissions to access the container in the azure storage account. You can check the permissions by navigating to the storage account, select "Access Control (IAM)" and check the role assignments tab. Make sure your account has "Storage Blob Data Contributor" or "Storage Blob Data Reader " role assigned.
Make sure that your diagnostics settings for trusted signing account are set up properly. You can check this in Azure portal. Navigate to Storage account > Monitoring (Classic) > Diagnostic settings.
Ensure that the storage account is chosen as the destination for the logs check whether the container name is correct.
Reference:
https://zcusa.951200.xyz/en-us/azure/storage/blobs/authorize-access-azure-active-directory
https://zcusa.951200.xyz/en-us/azure/storage/blobs/assign-azure-role-data-access?tabs=portal
Please let us know if you have any further queries. I’m happy to assist you further.
Hi Dave,
Just checking in to see if the below answer helped. If this answers your query, please don’t forget to "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.
Hi Dave,
Just checking in to see if the below answer helped. If this answers your query, please don’t forget to "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.
Hi Dave,
Happy to hear that your problem has solved. Please Accept the answer if the answer helped you which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.
The problem turned out to be network access, once I added a firewall rule it was fine
@Dave I'm glad that you were able to resolve your issue and thank you for posting your solution so that others experiencing the same thing can easily reference this! Since the Microsoft Q&A community has a policy that "The question author cannot accept their own answer. They can only accept answers by others ", I'll repost your solution in case you'd like to "Accept " the answer.
Issue: Trying to get usage metrics from trusted monitoring to avoid exceeding the monthly cap and incurring extra charges. Following the steps to store logs from trusted signing in an Azure storage account, I encounter the error "This request is not authorized to perform this operation" when selecting the container. Despite using the same account to create both the storage and trusted signing accounts, and adding the diagnostic setting, I still can't access the logs.
Solution: After inital troubleshooting, you were able to fix the issue.
The issue was related to network access. Once I added a firewall rule, it resolved the problem.
Please let us know if you have any more questions and we will be glad to assist you further. Thank you!