Two applications require different Azure Files user identity sources: one AD DS and one Entra Kerberos. The team plans two shares inside a single classic account with both sources enabled simultaneously. What should change?

✓ Correct answer

• Use separate storage accounts for the independently enabled identity sources

Separate the accounts when simultaneously enabled identity sources must differ. Permissions within a share are distinct from enabling its account's identity method. Option explanations: A. Enable AD DS on one share and Entra Kerberos on the other within that account: Identity-source enablement is at account level, not an independent per-share setting. B. Rename the shares to select their authentication source: Share names do not determine account identity integration. C. Assign two Azure management Owner roles to enable both: Management roles do not change the one-identity-source restriction. D. Use separate storage accounts for the independently enabled identity sources: Only one SMB user identity source can be enabled per classic account and applies across its shares. Sources: Overview of Azure Files identity-based authentication for SMB access — https://learn.microsoft.com/en-us/azure/storage/files/storage-files-active-directory-overview; Enable Microsoft Entra Kerberos authentication for hybrid and cloud-only identities on Azure Files — https://learn.microsoft.com/en-us/azure/storage/files/storage-files-identity-auth-hybrid-identities-enable

Read the source reference