To assign an Azure role to an Azure AD identity, using the Azure portal, follow these steps:
In the Azure portal, go to your file share, or create a file share.
Select Access Control (IAM).
Select Add a role assignment
In the Add role assignment blade, select the appropriate built-in role from the Role list.
Storage File Data SMB Share Reader
Storage File Data SMB Share Contributor
Storage File Data SMB Share Elevated Contributor
Leave Assign access to at the default setting: Azure AD user, group, or service principal. Select the target Azure AD identity by name or email address. The selected Azure AD identity must be a hybrid identity and cannot be a cloud only identity. This means that the same identity is also represented in AD DS.
Select Save to complete the role assignment operation.
https://learn.microsoft.com/en-us/azure/storage/files/storage-files-identity-ad-ds-assign- permissions?tabs=azure-portal