Route blob immutability changes outside Storage Explorer’s access-policy editor

Source facts

Microsoft’s Blob Storage guide describes adding, editing, and removing container access policies in Storage Explorer. The guide explicitly states that Storage Explorer does not support modifying immutability policies. Microsoft Learn

Applicability

This applies when a storage operator receives a blob-container policy request and is considering the Access Policies dialog in Azure Storage Explorer.

DSE recommendation

DSE recommends identifying the requested policy type before choosing the tool or approving the change. Ask the data owner to describe the intended access or retention outcome and record the exact container. If the request concerns immutability, route it to the appropriate documented management procedure and responsible owner. Keep that request separate from edits to the access policies shown in Storage Explorer, even when both requests refer to the same container.

Verification

Review the request, selected policy type, and management path before any mutation. For an access-policy edit, compare the resulting policy list with the approved values. For an immutability request, retain the handoff and require evidence from the relevant management path. Do not mark retention work complete merely because the Storage Explorer access-policy dialog saved successfully.

Official references

• Microsoft: Manage Azure Blob Storage resources with Storage Explorer | Microsoft Learn