CmdID

CmdID / az / az storage / az storage account

az storage account update

Update the properties of a storage account. Azure CLI reference

67 options Its page in the Azure CLI reference

Opens CmdID with your command. It is read in your browser and sent nowhere.

Options

67 in the Azure CLI reference
Show its 67 options
--account-typeSpecify the Active Directory account type for Azure Storage.
--actionThe action of virtual network rule.
--allow-blob-access-points, --allow-access-pointsAllow Blob Access Point configurations to be created or managed on the storage account.
--allow-blob-public-accessAllow or disallow public access to all blobs or containers in the storage account.
--allow-cross-tenant-delegation-sas, --cross-tenant-sasAllow or disallow cross-tenant user delegation SAS.
--allow-cross-tenant-replication, -rAllow or disallow cross AAD tenant object replication.
--allow-protected-append-writes, --allow-append, -wThis property can only be changed for disabled and unlocked time-based retention policies.
--allow-shared-key-access, -kIndicate whether the storage account permits requests to be authorized with the account access key via Shared Key.
--allow-shared-key-access-for-blob, --blob-shared-keyAllow or disallow Shared Key authorization for the blob service.
--allow-shared-key-access-for-file, --file-shared-keyAllow or disallow Shared Key authorization for the file service.
--allow-shared-key-access-for-queue, --queue-shared-keyAllow or disallow Shared Key authorization for the queue service.
--allow-shared-key-access-for-table, --table-shared-keyAllow or disallow Shared Key authorization for the table service.
--allowed-copy-scopeRestrict copy to and from Storage Accounts within an AAD tenant or with Private Links to the same VNet.
--azure-storage-sidSpecify the security identifier (SID) for Azure Storage.
--bypassBypass traffic for space-separated uses.
--custom-domainUser domain assigned to the storage account.
--default-actionDefault action to apply when no rule matches.
--default-share-permission, -dDefault share permission for users using Kerberos authentication if RBAC role is not assigned.
--domain-guidSpecify the domain GUID.
--domain-nameSpecify the primary domain that the AD DNS server is authoritative for.
--domain-sidSpecify the security identifier (SID).
--enable-blob-geo-priority-replication, --blob-geo-slaIndicates whether Blob Geo Priority Replication is enabled for the storage account.
--enable-extended-groupsEnable extended group support with local users feature, if set to true.
--enable-files-aaddsEnable Azure Active Directory Domain Services authentication for Azure Files
--enable-files-aadkerbEnable Azure Files Active Directory Domain Service Kerberos Authentication for the storage account
--enable-files-addsEnable Azure Files Active Directory Domain Service Authentication for storage account.
--enable-large-file-shareEnable the capability to support large file shares with more than 5 TiB capacity for storage account.Once the property is enabled, the feature cannot be disabled.
--enable-local-userEnable local user features.
--enable-sftpEnable Secure File Transfer Protocol.
--enable-smb-oauthSpecifies if managed identities can access SMB shares using OAuth.
--encryption-key-nameThe name of the KeyVault key.
--encryption-key-sourceThe default encryption key source
--encryption-key-vaultThe Uri of the KeyVault.
--encryption-key-versionThe version of the KeyVault key to use, which will opt out of implicit key rotation.
--forest-nameSpecify the Active Directory forest to get.
--identity-typeThe identity type.
--immutability-period-in-days, --immutability-periodThe immutability period for the blobs in the container since the policy creation, in days.
--immutability-stateDefines the mode of the policy.
--key-expiration-period-in-days, --key-exp-daysExpiration period in days of the Key Policy assigned to the storage account
--key-vault-federated-client-id, -fClientId of the multi-tenant application to be used in conjunction with the user-assigned identity for cross-tenant customer-managed-keys server-side encryption on the storage account.
--key-vault-user-identity-id, -uResource identifier of the UserAssigned identity to be associated with server-side encryption on the storage account.
--min-tls-versionThe minimum TLS version to be permitted on requests to storage.
--name, -nThe storage account name.
--net-bios-domain-nameSpecify the NetBIOS domain name.
--public-network-accessEnable or disable public network access to the storage account.
--publish-internet-endpointsA boolean flag which indicates whether internet routing storage endpoints are to be published.
--publish-ipv6-endpointA boolean flag which indicates whether IPv6 storage endpoints are to be published.
--publish-microsoft-endpointsA boolean flag which indicates whether microsoft routing storage endpoints are to be published.
--require-user-bound-user-delegation-sas, --user-bound-sasRequire user delegation SAS tokens to be bound to a specific user.
--require-user-bound-user-delegation-sas-action, --user-bound-actionThe action to perform when a user delegation SAS token is not bound to a user as required.
--resource-group-name
--routing-choiceRouting Choice defines the kind of network routing opted by the user.
--sam-account-nameSpecify the Active Directory SAMAccountName for Azure Storage.
--sas-expiration-action, --sas-exp-actionThe action to be performed when --sas-expiration-period is violated.
--sas-expiration-period, --sas-expExpiration period of the SAS Policy assigned to the storage account, DD.HH:MM:SS.
--skuNote that the SKU name cannot be updated to Standard_ZRS, Premium_LRS or Premium_ZRS, nor can accounts of those SKU names be updated to any other value
--subnetName or ID of subnet.
--tagsspace-separated tags: key[=value] [key[=value] ...].
--turbo-tier-statusEnable or disable Turbo Tier.
--turbo-tier-target-percent, --turbo-tier-targetTarget fill percentage for Turbo Tier, from 10 to 100.
--upgrade-to-storagev2Upgrade Storage Account Kind to StorageV2.
--use-subdomainSpecify whether to use indirect CNAME validation.
--user-identity-idThe key is the ARM resource identifier of the identity.
--vnet-nameName of a virtual network.
--yes, -yDo not prompt for confirmation.
--zone-placement-policyThe availability zone pinning policy for the storage account.
--zonesDescribes the available zones for the product where storage account resource can be created.