Reference:
https://docs.microsoft.com/en-us/azure/storage/common/storage-sas-overview This allows for limited-time fine grained access control to resources. So you can generate URL, specify duration (for month of April) and disseminate URL to 10 team members. On May 1, the SAS token is automatically invalidated, denying team members continued access.