# Create an Azure Container SAS Token

Container Shared Access Signature (SAS) tokens give access to files in your Azure Storage Container.

To create SAS tokens:

1. Sign in to the Azure portal and go to your Azure Storage account.

2. In your Azure container, from Settings, click **Shared access tokens**.

3. Create a SAS token with these settings.

   - Signing Method - Account Key
   - Required Permissions - read, delete, list
   - Expiry - Set an expiration date that matches your organization's security policies. We recommend a date between 1–3 months.
   - Allowed Protocols - HTTPS only

4. Copy the Blob SAS Token and Blob SAS Url. They’re used in [Set Up an Azure Blob Storage Connection](https://help.salesforce.com/s/articleView?id=c360\_a_set_up_azure_connection.htm\&type=5)

   You must regenerate the SAS token before its expiration or when there's a change in the Container URL or Container Path of Data 360 Azure Blob Storage Connector. Data 360 Azure Blob Storage Connector doesn't support Azure account or Azure file tokens.