Before you enable Azure AD over SMB for Azure file shares, make sure you have completed the following prerequisites: 1. Select or create an Azure AD tenant. 2. To support authentication with Azure AD credentials, you must enable Azure AD Domain Services for your Azure AD tenant. Etc. Note: The Storage File Data SMB Share Elevated Contributor allows read, write, delete and modify NTFS permissions in Azure Storage file shares over SMB. Reference: https://docs.microsoft.com/en-us/azure/storage/files/storage-files-identity-auth-active-directory- domain-service-enable