--- title: Access your data in ABFS without any credential keys! author: Hue Team type: post date: 2021-09-21T00:00:00+00:00 url: /blog/2021-09-21-access-your-data-in-abfs-without-any-credential-keys/ sf_thumbnail_type: - none sf_thumbnail_link_type: - link_to_post sf_detail_type: - none sf_page_title: - 1 sf_page_title_style: - standard sf_no_breadcrumbs: - 1 sf_page_title_bg: - none sf_page_title_text_style: - light sf_background_image_size: - cover sf_social_sharing: - 1 sf_related_articles: - 1 sf_sidebar_config: - left-sidebar sf_left_sidebar: - Sidebar-2 sf_right_sidebar: - Sidebar-1 sf_caption_position: - caption-right sf_remove_promo_bar: - 1 ampforwp-amp-on-off: - default categories: - Version 4.11 - Development - Browsing ---
Using Shared Access Signatures (SAS) to manage files and its operations
Previously, we talked about [providing S3 data access without giving out actual credentials](/blog/2021-04-23-s3-file-access-without-any-credentials-and-signed-urls/) via S3 signed URLs. This time, this feature is coming for another major cloud provider in the market, **Microsoft Azure!** This main use case remains the same which is to keep things simple for the end users and walk one more step on the path towards unlocking true self-service querying. The **WHY** behind this, also remains the same which has been discussed in the previous S3 access blog. The only thing which has changed is extending this to ADLS via Azure SAS tokens! ## Where does Azure SAS actually fit in? A [SAS](https://docs.microsoft.com/en-us/azure/storage/common/storage-sas-overview) is a token to append to the URI (i.e. path) of your storage objects which grants restricted access rights to those objects (meaning you can grant users access to a resource for a specified period of time, with a specified set of permissions). The SAS tokens are ‘signed’ and safe to provide publicly to the users. Hue does not require any ADLS credentials now and neither does it generate the SAS token. Hue just asks in this example to a [RAZ Server](https://blog.cloudera.com/access-control-for-azure-adls-cloud-object-storage/) to provide the equivalent SAS token for the ADLS call (REST APIs) a user wants to make via the File Browser. 