Share via


Storage Accounts - List Keys

Lists the access keys or Kerberos keys (if active directory enabled) for the specified storage account.

POST https://management.azure.com/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Storage/storageAccounts/{accountName}/listKeys?api-version=2025-06-01
POST https://management.azure.com/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Storage/storageAccounts/{accountName}/listKeys?api-version=2025-06-01&$expand=kerb

URI Parameters

Name In Required Type Description
accountName
path True

string

minLength: 3
maxLength: 24
pattern: ^[a-z0-9]+$

The name of the storage account within the specified resource group. Storage account names must be between 3 and 24 characters in length and use numbers and lower-case letters only.

resourceGroupName
path True

string

minLength: 1
maxLength: 90

The name of the resource group. The name is case insensitive.

subscriptionId
path True

string (uuid)

The ID of the target subscription. The value must be an UUID.

api-version
query True

string

minLength: 1

The API version to use for this operation.

$expand
query

$expand

Specifies type of the key to be listed. Possible value is kerb.

Responses

Name Type Description
200 OK

StorageAccountListKeysResult

Azure operation completed successfully.

Other Status Codes

ErrorResponse

An unexpected error response.

Security

azure_auth

Azure Active Directory OAuth2 Flow.

Type: oauth2
Flow: implicit
Authorization URL: https://login.microsoftonline.com/common/oauth2/authorize

Scopes

Name Description
user_impersonation impersonate your user account

Examples

StorageAccountListKeys

Sample request

POST https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/res418/providers/Microsoft.Storage/storageAccounts/sto2220/listKeys?api-version=2025-06-01&$expand=kerb

Sample response

{
  "keys": [
    {
      "keyName": "key1",
      "permissions": "Full",
      "value": "<value>"
    },
    {
      "keyName": "key2",
      "permissions": "Full",
      "value": "<value>"
    }
  ]
}

Definitions

Name Description
$expand

Specifies type of the key to be listed. Possible value is kerb.

ErrorResponse

An error response from the storage resource provider.

ErrorResponseBody

Error response body contract.

KeyPermission

Permissions for the key -- read-only or full permissions.

StorageAccountKey

An access key for the storage account.

StorageAccountListKeysResult

The response from the ListKeys operation.

$expand

Specifies type of the key to be listed. Possible value is kerb.

Value Description
kerb

ErrorResponse

An error response from the storage resource provider.

Name Type Description
error

ErrorResponseBody

Azure Storage Resource Provider error response body.

ErrorResponseBody

Error response body contract.

Name Type Description
code

string

An identifier for the error. Codes are invariant and are intended to be consumed programmatically.

message

string

A message describing the error, intended to be suitable for display in a user interface.

KeyPermission

Permissions for the key -- read-only or full permissions.

Value Description
Read
Full

StorageAccountKey

An access key for the storage account.

Name Type Description
creationTime

string (date-time)

Creation time of the key, in round trip date format.

keyName

string

Name of the key.

permissions

KeyPermission

Permissions for the key -- read-only or full permissions.

value

string

Base 64-encoded value of the key.

StorageAccountListKeysResult

The response from the ListKeys operation.

Name Type Description
keys

StorageAccountKey[]

Gets the list of storage account keys and their properties for the specified storage account.