---
schema_version: "1"
id: 653b7529dff81dcf8053df4020f537e287ab6c2c14c481846042f0ed506680a1
title: Create a Microsoft Azure Container SAS Token
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/data/264-0-0/c360_a_create_an_azure_container_sas_token.md
canonical_url: https://help.salesforce.com/s/articleView?id=data.c360_a_create_an_azure_container_sas_token.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: d98db079d11003030a65ceaffdab9857b41aa1e95590c9069b4302228c63d6d9
description: Container Shared Access Signature (SAS) tokens give access to files in your Microsoft Azure Storage container.
products:
  - Data 360
release: "264"
---
# Create a Microsoft Azure Container SAS Token

Container Shared Access Signature (SAS) tokens give access to files in your Microsoft Azure Storage container.

To create SAS tokens:

1. Sign in to the Microsoft Azure portal and go to your Azure Storage account.
2. In your Microsoft Azure container, from Settings, click **Shared access tokens**.
3. Create a SAS token with these settings.
    
    - Signing Method - Account Key
    - Required Permissions - read, write, list, delete, tag. To add the tag permission, generate the token using the [Azure Storage Explorer](https://azure.microsoft.com/en-gb/products/storage/storage-explorer/) app and follow the steps in [Get the SAS for a blob container](https://learn.microsoft.com/en-us/azure/vs-azure-tools-storage-explorer-blobs#get-the-sas-for-a-blob-container). Refer to the See Also section for more information on the permissions supported for each resource type.
    - Allowed Protocols - HTTPS only
4. Copy the Blob SAS Token and Blob SAS Url. They’re used in [Set Up a Microsoft Azure Target Connection](https://help.salesforce.com/s/articleView?id=data.c360_a_set_up_a_microsoft_azure_target_connection.htm&release=264.0.0&type=5 "After you create your Data 360 instance, you can set up a Microsoft Azure Blob Storage Connection.")
    
    We recommend that you regenerate the SAS token before expiry to avoid invalid credential errors when connecting to Data 360. Data 360 Azure Storage Service Connector doesn't support Azure account or Azure file tokens.

#### See Also

- [_External_: Permissions for a directory, container, or blob](https://learn.microsoft.com/en-us/rest/api/storageservices/create-service-sas#permissions-for-a-directory-container-or-blob)