{
    "api_version": "1",
    "kind": "dse_post",
    "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260917-048-route-blob-immutability-changes-outside-storage-explorers-access-policy-editor/",
    "item": {
        "id": "https://update.dsesecurity.com/updates/dse-20260917-048-route-blob-immutability-changes-outside-storage-explorers-access-policy-editor/",
        "slug": "dse-20260917-048-route-blob-immutability-changes-outside-storage-explorers-access-policy-editor",
        "url": "https://update.dsesecurity.com/updates/dse-20260917-048-route-blob-immutability-changes-outside-storage-explorers-access-policy-editor/",
        "alternate_urls": {
            "markdown": "https://update.dsesecurity.com/updates/dse-20260917-048-route-blob-immutability-changes-outside-storage-explorers-access-policy-editor.md",
            "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260917-048-route-blob-immutability-changes-outside-storage-explorers-access-policy-editor/"
        },
        "title": "Route blob immutability changes outside Storage Explorer’s access-policy editor",
        "summary": "DSE recommends identifying the requested policy type before choosing the tool or approving the change.",
        "format": {
            "slug": "guide",
            "name": "Guide"
        },
        "priority": {
            "slug": "info",
            "name": "Information"
        },
        "featured": false,
        "image": {
            "theme": "managed-it",
            "label": "Managed IT operations",
            "alt": "A controlled technology lifecycle progressing from assessment to approved production.",
            "card_url": "https://update.dsesecurity.com/assets/editorial/managed-it-card.webp?v=1.8.20",
            "hero_url": "https://update.dsesecurity.com/assets/editorial/managed-it-hero.webp?v=1.8.20",
            "social_url": "https://update.dsesecurity.com/assets/editorial/managed-it-social-v2.jpg?v=1.8.20",
            "width": 2400,
            "height": 1350
        },
        "topics": [
            {
                "slug": "it",
                "name": "IT",
                "url": "https://update.dsesecurity.com/topic/it/"
            }
        ],
        "author": {
            "name": "DSE Security Editorial Team",
            "url": "https://update.dsesecurity.com/#editorial-team",
            "type": "Organization"
        },
        "publisher": {
            "name": "Detection Systems & Engineering",
            "url": "https://dsesecurity.com/"
        },
        "published_at": "2026-09-17T16:34:12+00:00",
        "modified_at": "2026-09-17T16:35:04+00:00",
        "reviewed_on": "2026-09-17",
        "reading_minutes": 1,
        "word_count": 198,
        "potentially_affected": "This applies when a storage operator receives a blob-container policy request and is considering the Access Policies dialog in Azure Storage Explorer.",
        "dse_recommendation": "DSE recommends identifying the requested policy type before choosing the tool or approving the change.",
        "primary_source": {
            "name": "Manage Azure Blob Storage resources with Storage Explorer | Microsoft Learn",
            "url": "https://learn.microsoft.com/en-us/azure/storage/storage-explorer/vs-azure-tools-storage-explorer-blobs",
            "published_on": null,
            "authority": "Microsoft Learn"
        },
        "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/",
        "usage_info": "https://update.dsesecurity.com/usage/",
        "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.",
        "content_html": "<h2>Source facts</h2>\n<p>Microsoft’s Blob Storage guide describes adding, editing, and removing container access policies in Storage Explorer. The guide explicitly states that Storage Explorer does not support modifying immutability policies. <a href=\"https://learn.microsoft.com/en-us/azure/storage/storage-explorer/vs-azure-tools-storage-explorer-blobs\" target=\"_blank\" rel=\"noopener noreferrer\">Microsoft Learn</a></p>\n<h2>Applicability</h2>\n<p>This applies when a storage operator receives a blob-container policy request and is considering the Access Policies dialog in Azure Storage Explorer.</p>\n<h2>DSE recommendation</h2>\n<p>DSE recommends identifying the requested policy type before choosing the tool or approving the change. Ask the data owner to describe the intended access or retention outcome and record the exact container. If the request concerns immutability, route it to the appropriate documented management procedure and responsible owner. Keep that request separate from edits to the access policies shown in Storage Explorer, even when both requests refer to the same container.</p>\n<h2>Verification</h2>\n<p>Review the request, selected policy type, and management path before any mutation. For an access-policy edit, compare the resulting policy list with the approved values. For an immutability request, retain the handoff and require evidence from the relevant management path. Do not mark retention work complete merely because the Storage Explorer access-policy dialog saved successfully.</p>\n<h2>Official references</h2>\n<ul>\n<li><a href=\"https://learn.microsoft.com/en-us/azure/storage/storage-explorer/vs-azure-tools-storage-explorer-blobs\" target=\"_blank\" rel=\"noopener noreferrer\">Microsoft: Manage Azure Blob Storage resources with Storage Explorer | Microsoft Learn</a></li>\n</ul>",
        "content_text": "Source facts\nMicrosoft’s Blob Storage guide describes adding, editing, and removing container access policies in Storage Explorer. The guide explicitly states that Storage Explorer does not support modifying immutability policies. Microsoft Learn\nApplicability\nThis applies when a storage operator receives a blob-container policy request and is considering the Access Policies dialog in Azure Storage Explorer.\nDSE recommendation\nDSE recommends identifying the requested policy type before choosing the tool or approving the change. Ask the data owner to describe the intended access or retention outcome and record the exact container. If the request concerns immutability, route it to the appropriate documented management procedure and responsible owner. Keep that request separate from edits to the access policies shown in Storage Explorer, even when both requests refer to the same container.\nVerification\nReview the request, selected policy type, and management path before any mutation. For an access-policy edit, compare the resulting policy list with the approved values. For an immutability request, retain the handoff and require evidence from the relevant management path. Do not mark retention work complete merely because the Storage Explorer access-policy dialog saved successfully.\nOfficial references\n\nMicrosoft: Manage Azure Blob Storage resources with Storage Explorer | Microsoft Learn",
        "content_markdown": "## Source facts\n\nMicrosoft’s Blob Storage guide describes adding, editing, and removing container access policies in Storage Explorer. The guide explicitly states that Storage Explorer does not support modifying immutability policies. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/storage/storage-explorer/vs-azure-tools-storage-explorer-blobs)\n\n## Applicability\n\nThis applies when a storage operator receives a blob-container policy request and is considering the Access Policies dialog in Azure Storage Explorer.\n\n## DSE recommendation\n\nDSE recommends identifying the requested policy type before choosing the tool or approving the change. Ask the data owner to describe the intended access or retention outcome and record the exact container. If the request concerns immutability, route it to the appropriate documented management procedure and responsible owner. Keep that request separate from edits to the access policies shown in Storage Explorer, even when both requests refer to the same container.\n\n## Verification\n\nReview the request, selected policy type, and management path before any mutation. For an access-policy edit, compare the resulting policy list with the approved values. For an immutability request, retain the handoff and require evidence from the relevant management path. Do not mark retention work complete merely because the Storage Explorer access-policy dialog saved successfully.\n\n## Official references\n\n- [Microsoft: Manage Azure Blob Storage resources with Storage Explorer | Microsoft Learn](https://learn.microsoft.com/en-us/azure/storage/storage-explorer/vs-azure-tools-storage-explorer-blobs)"
    },
    "json_ld": {
        "@context": "https://schema.org",
        "@graph": [
            {
                "@type": "Organization",
                "@id": "https://dsesecurity.com/#organization",
                "name": "Detection Systems & Engineering",
                "alternateName": "DSE Security",
                "url": "https://dsesecurity.com/",
                "logo": {
                    "@type": "ImageObject",
                    "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20"
                }
            },
            {
                "@type": "Organization",
                "@id": "https://update.dsesecurity.com/#editorial-team",
                "name": "DSE Security Editorial Team",
                "url": "https://update.dsesecurity.com/",
                "parentOrganization": {
                    "@id": "https://dsesecurity.com/#organization"
                }
            },
            {
                "@type": "WebSite",
                "@id": "https://update.dsesecurity.com/#website",
                "name": "DSE Updates",
                "alternateName": "DSE Security Knowledge Hub",
                "url": "https://update.dsesecurity.com/",
                "inLanguage": "en-US",
                "publisher": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "potentialAction": {
                    "@type": "SearchAction",
                    "target": {
                        "@type": "EntryPoint",
                        "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}"
                    },
                    "query-input": "required name=search_term_string"
                }
            },
            {
                "@type": "WebPage",
                "@id": "https://update.dsesecurity.com/updates/dse-20260917-048-route-blob-immutability-changes-outside-storage-explorers-access-policy-editor/",
                "url": "https://update.dsesecurity.com/updates/dse-20260917-048-route-blob-immutability-changes-outside-storage-explorers-access-policy-editor/",
                "isPartOf": {
                    "@id": "https://update.dsesecurity.com/#website"
                },
                "lastReviewed": "2026-09-17"
            },
            {
                "@type": "BreadcrumbList",
                "@id": "https://update.dsesecurity.com/updates/dse-20260917-048-route-blob-immutability-changes-outside-storage-explorers-access-policy-editor/#breadcrumbs",
                "itemListElement": [
                    {
                        "@type": "ListItem",
                        "position": 1,
                        "name": "DSE Updates",
                        "item": "https://update.dsesecurity.com/"
                    },
                    {
                        "@type": "ListItem",
                        "position": 2,
                        "name": "Route blob immutability changes outside Storage Explorer’s access-policy editor",
                        "item": "https://update.dsesecurity.com/updates/dse-20260917-048-route-blob-immutability-changes-outside-storage-explorers-access-policy-editor/"
                    }
                ]
            },
            {
                "@type": [
                    "Article",
                    "TechArticle"
                ],
                "@id": "https://update.dsesecurity.com/updates/dse-20260917-048-route-blob-immutability-changes-outside-storage-explorers-access-policy-editor/#article",
                "identifier": "https://update.dsesecurity.com/updates/dse-20260917-048-route-blob-immutability-changes-outside-storage-explorers-access-policy-editor/",
                "url": "https://update.dsesecurity.com/updates/dse-20260917-048-route-blob-immutability-changes-outside-storage-explorers-access-policy-editor/",
                "headline": "Route blob immutability changes outside Storage Explorer’s access-policy editor",
                "description": "DSE recommends identifying the requested policy type before choosing the tool or approving the change.",
                "abstract": "DSE recommends identifying the requested policy type before choosing the tool or approving the change.",
                "articleBody": "Source facts\nMicrosoft’s Blob Storage guide describes adding, editing, and removing container access policies in Storage Explorer. The guide explicitly states that Storage Explorer does not support modifying immutability policies. Microsoft Learn\nApplicability\nThis applies when a storage operator receives a blob-container policy request and is considering the Access Policies dialog in Azure Storage Explorer.\nDSE recommendation\nDSE recommends identifying the requested policy type before choosing the tool or approving the change. Ask the data owner to describe the intended access or retention outcome and record the exact container. If the request concerns immutability, route it to the appropriate documented management procedure and responsible owner. Keep that request separate from edits to the access policies shown in Storage Explorer, even when both requests refer to the same container.\nVerification\nReview the request, selected policy type, and management path before any mutation. For an access-policy edit, compare the resulting policy list with the approved values. For an immutability request, retain the handoff and require evidence from the relevant management path. Do not mark retention work complete merely because the Storage Explorer access-policy dialog saved successfully.\nOfficial references\n\nMicrosoft: Manage Azure Blob Storage resources with Storage Explorer | Microsoft Learn",
                "datePublished": "2026-09-17T16:34:12+00:00",
                "dateModified": "2026-09-17T16:35:04+00:00",
                "mainEntityOfPage": {
                    "@id": "https://update.dsesecurity.com/updates/dse-20260917-048-route-blob-immutability-changes-outside-storage-explorers-access-policy-editor/"
                },
                "inLanguage": "en-US",
                "isAccessibleForFree": true,
                "author": {
                    "@type": "Organization",
                    "name": "DSE Security Editorial Team",
                    "url": "https://update.dsesecurity.com/#editorial-team"
                },
                "publisher": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "image": {
                    "@type": "ImageObject",
                    "@id": "https://update.dsesecurity.com/updates/dse-20260917-048-route-blob-immutability-changes-outside-storage-explorers-access-policy-editor/#primaryimage",
                    "url": "https://update.dsesecurity.com/assets/editorial/managed-it-social-v2.jpg?v=1.8.20",
                    "contentUrl": "https://update.dsesecurity.com/assets/editorial/managed-it-social-v2.jpg?v=1.8.20",
                    "width": 1200,
                    "height": 630,
                    "caption": "Route blob immutability changes outside Storage Explorer’s access-policy editor"
                },
                "articleSection": [
                    "IT"
                ],
                "keywords": [
                    "IT",
                    "Guide",
                    "Information priority"
                ],
                "genre": "Guide",
                "about": [
                    {
                        "@type": "Thing",
                        "name": "IT",
                        "url": "https://update.dsesecurity.com/topic/it/"
                    }
                ],
                "wordCount": 198,
                "timeRequired": "PT1M",
                "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/",
                "usageInfo": "https://update.dsesecurity.com/usage/",
                "copyrightHolder": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.",
                "citation": {
                    "@type": "CreativeWork",
                    "name": "Manage Azure Blob Storage resources with Storage Explorer | Microsoft Learn",
                    "url": "https://learn.microsoft.com/en-us/azure/storage/storage-explorer/vs-azure-tools-storage-explorer-blobs"
                }
            }
        ]
    }
}