How can we help?
Guides for users and Azure administrators of Blob Web Explorer, the enterprise file explorer for Azure Blob Storage — in SaaS, in a dedicated Enterprise instance, or from Azure Marketplace.
Get started
Overview
A governed, familiar file workspace on top of Azure Blob Storage.
Blob Web Explorer lets business and technical teams work with Azure Blob Storage from a browser, without the Azure portal and without installing software. Your files stay in your own storage accounts; Blob Web Explorer adds the user experience, access control, and traceability.
File explorer
Browse, preview, upload, download, rename, move, copy, and delete — like a desktop file manager.
Controlled sharing
Share a container with Read or Write permission and a validity period, without exposing storage keys.
Search all containers
One search across every container you can access, whatever the storage account: find a file by name, path, or extension and open it in one click.
How search worksUsage & costs
See volumes, top containers, inactive data, and indicative monthly costs.
Activity log
Every file and sharing operation is recorded with user, time, outcome, and IP address.
Customer Hub
Open and follow support tickets directly from the application.
Quick start
From sign-in to your first shared container in about ten minutes.
- Sign inOpen app.blobexplorer.com (or your organization's address) and sign in. New SaaS users create an account with their email, a verification code, a password, their country, and their name.
- Link your first containerSelect Link a container in the Containers menu (or on Home or Manage containers), choose a connection mode, and enter the container details. See Link a container.
- Work with your filesOpen the container from the dashboard, upload a file, and create a folder.
- Share with your teamFrom the container details, add a share with Read or Write permission. See Share a container.
- Enable searchOpen Workspace → Search all containers → Manage Index and index your containers. From then on, the search box in the top bar finds any file across all of them. See Search all containers.
Use Blob Web Explorer
Home & navigation
Your starting point after sign-in.
The Home page lists the containers you own and the containers shared with you, in separate sections so you always know where the data comes from. Shared containers show their owner and status; expired or disabled shares cannot be opened.
The Find any file search at the top of Home, and the search box in the top bar on the other pages, find a file across all your containers in one query; press Ctrl+K to jump to it. Quick filters list every PDF, Word, Excel, image, CSV or ZIP file in one click. Results come from the search index: index your containers, and re-index after changes, to get complete and up-to-date results. Quick actions take you to Link a container (when you can manage containers) and support. On the SaaS service, your plan and its limits are shown when relevant.
| Top menu | Entries |
|---|---|
| Dashboard | Direct link to Home (everyone) |
| Workspace | Shared with me, Search all containers (everyone) |
| Containers | Link a container, Discover from Azure, Manage containers, Usage & costs, Activity log (all SaaS users; Admins and Contributors in enterprise deployments). Discover from Azure is shown when Azure Discovery is enabled and you sign in with Microsoft Entra ID; Readers find it under Workspace. |
| Administration | Admin settings, Data storage, Access & roles, Branding, Deployment checklist (Admins, enterprise deployments) |
| Account | My profile (everyone), Plan & billing (SaaS service) |
| Help | Help & support, Open a case, Report a bug, About (everyone) |
The profile menu (your avatar) gives access to My profile, Plan & billing (SaaS), Help & support, and Sign out.
Light or dark top bar
Use the sun / moon button in the top bar to switch between a light and a dark top bar. Your choice is remembered in your browser.
Your organization's logo
In enterprise deployments, administrators can display their organization's logo at the top left of the application from Administration → Branding. Choose a PNG, JPEG, WebP or SVG file (256 KB maximum), check the preview on the light and dark top bars, then save; the logo applies to every user of the deployment. Restore default logo brings back the Blob Web Explorer logo, and each change is recorded in the activity log.
Link a container
Connect an Azure Blob Storage container to Blob Web Explorer. Available to Contributors and Admins.
| Connection mode | What you provide | Resulting access | Recommended for |
|---|---|---|---|
| Azure Identity | Storage account and container name. No secret. | Follows your Azure RBAC: Storage Blob Data Reader gives read-only, Storage Blob Data Contributor gives read/write. | Enterprise deployments signed in with Microsoft Entra ID |
| SAS URL | A container SAS URL | Limited to the permissions and expiry of the SAS token | Scoped or temporary access |
| Connection string | The storage account connection string | Full access to the container | Simple setups and evaluations |
- Open Link a containerFrom the Containers menu, Home, or Manage containers.
- Choose the connection modeOnly the fields required by the selected mode are shown.
- Enter the detailsAn alias (the name your team sees), the container name, and the connection information. You can ask Blob Web Explorer to create the container if it does not exist.
- Validate and saveBlob Web Explorer checks the connection and shows the result before saving. The container then appears on your Home page.
Data Lake Storage Gen2 accounts are supported through the Blob endpoint. Folders are virtual: an empty folder is represented by a .folder marker file. Data Lake directory ACLs are not managed by Blob Web Explorer.
File explorer
Everyday file operations in a Windows-style explorer: side pane, folder tree, address bar, right-click menus and keyboard shortcuts.
| Action | How | Permission |
|---|---|---|
| Switch container and browse | Pick a container in the side pane (yours and the ones shared with you), expand the folder tree, or type a path in the address bar. Large folders load progressively; choose Load more items to continue. | Read |
| Search a folder | Type in the search box to find files and folders in the current folder and its subfolders. Wildcards * and ? are accepted. | Read |
| Preview and properties | Double-click an image, PDF, video, audio or text file to preview it; use Properties to see its size, dates, access tier and metadata. | Read |
| Download | Select items and choose Download. Folders and multiple items are downloaded as a ZIP archive. | Read |
| Upload | Use Upload to add files to the current folder, with progress for each file. | Write |
| New folder, rename, move, copy | Use the command bar, right-click an item, or drag items onto a folder (hold Ctrl to copy). Shortcuts: F2, Ctrl+C, Ctrl+X, Ctrl+V. | Write |
| Delete | Select items, choose Delete (or press Del), and confirm. | Write |
The maximum upload size depends on your plan (SaaS) or deployment. Enterprise and Azure Marketplace deployments support files up to 195 GiB through the built-in chunked upload. Keep the browser tab open until the upload reaches 100%. Use the sun/moon button of the explorer to switch between its light and dark themes.
Share a container
Give colleagues or partners access without sharing storage keys.
- Open the container detailsFrom Manage containers, select the container you own.
- Add a shareEnter the recipient's email address. In enterprise deployments, directory suggestions appear as you type.
- Set accessChoose Read or Read and Write, an optional validity period, and an optional reason (up to 255 characters) for the Activity log.
- SaveThe container appears in the recipient's Shared with me list. You can disable, extend, or remove the share at any time; Stop sharing removes all shares at once.
- Only the owner of a container can manage its shares or delete it.
- A share permission always takes priority over the user's global role: an Admin who receives a Read share can only read that container.
- On the SaaS service, recipients must have an account (the Free plan is enough). The Free plan includes a few shares; paid plans raise the limit.
Search all containers
One search box for every container you can access — across storage accounts, without opening them one by one.
In the Azure portal you search one container at a time. Blob Web Explorer searches all your containers at once: the ones you own and the ones shared with you, even when they live in different storage accounts or subscriptions. Type part of a file name or folder path and get every match, with its container, size, and date.
Every container, one query
Results span all the containers you own or that are shared with you, whatever their storage account.
Instant results
Search reads a prepared index instead of scanning your storage, so results come back quickly even for large containers.
Straight to the file
Select a result to open its folder in the file explorer with the file already selected.
Where to search
- The search box in the top bar, available on every other page: type and press Enter, or press Ctrl+K to jump to it.
- The Search all containers card on the Dashboard.
- The Workspace → Search all containers page, which adds the extension filter and index management.
How to search
| You want to find | Type |
|---|---|
| A file whose name contains a word | invoice |
| Everything below a folder, in every container | contracts/2026 |
| All files of one type | Leave the text empty and enter pdf in Extension |
| A word, limited to one type | budget + Extension xlsx |
Matching is case-insensitive and finds your text anywhere in the file name or path. Search covers names and paths; it does not read file contents.
Keep the index fresh
Open Manage Index on the search page to index the containers you own. Containers shared with you are indexed by their owner.
| Index action | When to use it |
|---|---|
| Index | After linking a container, and after uploads or changes, to add or update files. |
| Rebuild | After deleting many files or after large changes made outside Blob Web Explorer. |
| Clear index | To remove the index of a container. Your files are not affected. |
Usage & costs
Volumes, activity, and indicative costs. Available to Contributors and Admins.
- Totals and top containers by size and number of files.
- Containers without changes for 90 days are flagged as inactive.
- Monthly costs are estimates for guidance only; your Azure invoice is the reference.
- Results are cached for up to 30 minutes, and the analysis of very large containers is capped at 50,000 files.
Activity log
Know who did what, when, and with which result.
Uploads, downloads, deletions, renames, moves, copies, and sharing changes are recorded with the user, the file or folder, the date, the duration, the outcome, any error code, the IP address, and a correlation identifier to share with support.
Container owners see the activity of their containers. In enterprise deployments, Admins can view all containers. Filter by container, action, or result to investigate an incident.
Administer
Roles & permissions
Two layers work together: the application role and the access to each container.
Application roles
| Area | Reader | Contributor | Admin |
|---|---|---|---|
| Home, file explorer, Shared with me, search, help & support | ✓ | ✓ | ✓ |
| Discover from Azure (Readers: personal links only, never shareable) | ✓ | ✓ | ✓ |
| Manage and link containers, share, usage & costs, activity log | — | ✓ | ✓ |
| Admin settings (including your organization's logo), Deployment checklist, view all containers | — | — | ✓ |
Enterprise roles apply to Platinum and Azure Marketplace deployments. On the SaaS service, every signed-in user has Contributor capabilities, and plan, billing, and account deletion pages are available.
Container access
| Situation | Read | Write | Manage & share | Delete container | View logs |
|---|---|---|---|---|---|
| Owner | ✓ | ✓ | ✓ | ✓ | ✓ |
| Shared with Write | ✓ | ✓ | — | — | — |
| Shared with Read | ✓ | — | — | — | — |
| Expired or disabled share | — | — | — | — | — |
| Owner of a personal link (Azure Identity) | Azure role | Azure role | Not shareable | ✓ (unlink) | Admins & Contributors |
Identity & sign-in
How users sign in and receive their role in enterprise deployments.
Microsoft Entra ID — App Roles
Declare the app roles BWE.Admin, BWE.Contributor, and BWE.Reader on the App Registration, then assign users or groups in Enterprise applications.
Azure AD B2C — Groups
Create the groups BWE_Admin, BWE_Contributor, and BWE_Reader and add users directly. Membership is read through Microsoft Graph at sign-in.
- The sign-in App Registration needs the Microsoft Graph Application permissions
User.Read.All,Group.Read.All, andGroupMember.Read.All, with administrator consent. - A user without a resolved role signs in with Reader access.
- After a role or group change, the user signs out and back in to refresh permissions.
Azure Discovery
Find and link existing containers from your Azure subscriptions with your own Azure access. Admins, Contributors and Readers, in enterprise deployments.
- Grant the delegated permissionsOn the App Registration, add Azure Service Management → user_impersonation (delegated), and Azure Storage → user_impersonation (delegated) for links based on a Storage Blob Data role. Ask an Entra administrator for consent if your tenant requires it.
- Check the Azure permissions of the userReader on the subscriptions, resource groups or storage accounts to list them, plus the access described below to link containers.
- Run DiscoveryAdmins and Contributors: Containers → Discover from Azure (also on Manage containers). Readers: Workspace → Discover from Azure or the Dashboard. Select a subscription and click Discover accounts.
- Link containersClick Browse on a storage account: the Link containers popup lets you search, select containers, adjust their aliases, and click Link selected. A summary shows the link type, read/write access and access end date of each container.
Link types
| Who | Azure access of the user | Link | Shareable |
|---|---|---|---|
| Admin, Contributor | Storage Account Contributor (storage keys allowed) | Valid for the configured period (2 years by default) | ✓ |
| Admin, Contributor | Storage Blob Data Reader or Contributor on the storage account | Signed with your Azure account: 7 days maximum, not renewed | ✓ |
| Reader | Storage Account Contributor or Storage Account Key Operator (storage keys allowed) | Personal: valid 7 days by default, not renewed; no Azure Storage consent needed | — |
| Reader (or data role on the container only) | Storage Blob Data Reader or Contributor | Personal: opened with your own Azure access, read/write follows your Azure role | — |
| Any role | Any access that lets you generate a container SAS (for example a user delegation SAS with Storage Blob Data Contributor) | Link with a SAS URL you generated: paste the container SAS URL in the Link containers popup; valid until the SAS expires | Admins and Contributors only |
Azure Marketplace
Run Blob Web Explorer in your own Azure subscription, billed through your Azure invoice.
What is deployed
- Linux App Service plan (new, or an existing plan in the same region) and web application (container image)
- Application Insights for monitoring (new, or an existing resource)
- Deployment secrets stored as encrypted application settings that you cannot read
- Managed identity with least-privilege role assignments
What you prepare
- A sign-in App Registration (Entra ID or Azure AD B2C)
- App roles or B2C groups for your users
- Microsoft Graph permissions with admin consent
- An existing storage account for application data (general-purpose v2, Standard tier)
- Outbound HTTPS to the BlobExplorer registry and support service
Application data storage
Blob Web Explorer stores its own data (users, linked containers, shares, activity) in tables of a storage account that you provide. It is never created by the deployment and stays under your full control: backup, network rules, retention, and keys. The publisher has no access to it.
| Connection method | What you provide | After deployment |
|---|---|---|
| Managed identity (recommended) | Select the storage account in the deployment form. No secret. | Grant the Storage Table Data Contributor role on the storage account to the web application identity, using the command provided in the deployment outputs. |
| Connection string | The storage account connection string (account key) | Nothing. The connection string is stored securely in your deployment. |
Administrators can change the storage account or the connection method at any time from Administration → Data storage: choose the method, test the connection, then switch. The change applies immediately without restart. Existing data is not copied automatically.
All features are included in the Marketplace edition. Plan and billing pages are not shown in the application because billing is handled by Azure Marketplace.
Security & privacy
How Blob Web Explorer protects your data.
Your data stays yours
Files stay in your storage accounts. They are read or written only when a user performs an operation.
Server-side authorization
Every file operation is checked against the user's role and container permissions on the server.
Protected secrets
Previews never expose SAS URLs to the browser. Marketplace secrets are stored as encrypted application settings that customers cannot read.
Transparency
An activity log records operations. See the Privacy Policy for data handling details.
Plans & billing (SaaS)
Manage your subscription from Plan & billing (Account menu or profile menu), organized in three tabs: My plan, Compare plans, and Invoices & payment.
- Plans. Free and Pro plans differ by the number of containers and active recipients (a person you share with counts once, whatever the number of containers) and by the maximum upload size. Plan details are on the pricing page. Limits are enforced by the service.
- Subscribe or change plan. On Compare plans, choose monthly or yearly billing (yearly includes 2 months free), then complete payment in Stripe's secure checkout. Your new limits apply automatically within a few moments of payment. Plan changes are prorated.
- Invoices. Open Invoices & payment to download them from the Stripe customer portal.
- Cancel or downgrade. Cancellation takes effect at the end of the current period. Your account then moves to the Free plan limits. Nothing is deleted: your oldest containers and recipients, up to the new limits, keep full access; the most recent ones become read-only (files can still be opened and downloaded, but not changed, and those containers cannot be shared). They are flagged Read-only (plan limit). Upgrade again, or remove containers or recipients, to restore write access.
- Delete your account. My profile → Delete my account removes your profile and linked containers from Blob Web Explorer. Data in your storage accounts is not deleted.
See the Subscription Terms. Platinum and Azure Marketplace editions do not use these pages.
Help
Customer Hub
Create and follow support tickets without leaving the application.
- Open Help & supportFrom the Help menu in the top menu or the profile menu. Filter your tickets (In progress, Waiting for you, Resolved) or search them; Reply now appears when our team is waiting for your answer. A red counter on the bell icon and the Help menu tells you when our team has replied; the tickets concerned show a New badge until you open them.
- Create a caseChoose Open a case or Report a bug, select the impact level, describe the issue, and drop up to 3 files (10 MB each: PDF, images, DOCX, XLSX, TXT, ZIP). Deployment facts shows the version details support may ask for, with a Copy details button.
- Follow upOpen the ticket to see where it stands (Submitted, In progress, Waiting for you, Resolved), the conversation, and attachments. Reply in the same ticket; replying to a resolved ticket reopens it.
Status
Priority
Troubleshooting
Quick fixes for the most common situations.
| Symptom | Likely cause | Resolution |
|---|---|---|
| A container cannot be opened | Expired SAS, rotated key, missing RBAC, or storage firewall | Update the connection, check Azure permissions, or allow network access. |
| Container opens read-only | Read share, read-only SAS, or Storage Blob Data Reader role | Ask the owner for Write access or assign Storage Blob Data Contributor. |
| Azure Identity is not available | You signed in with Azure AD B2C | Use a SAS URL or a connection string, or sign in with Entra ID. |
| Search returns no result | Container not indexed yet, or file added after the last indexing | Open Manage Index and run Index or Rebuild. For a shared container, ask its owner to index it. |
| Admin pages are missing | Role not assigned or not refreshed | Assign BWE.Admin (or BWE_Admin), then sign out and back in. |
Sign-in error AADSTS50011 | Redirect URI missing on the App Registration | Add https://<your-app>/signin-oidc as a Web redirect URI. |
| Upload stops before 100% | Tab closed or network interruption | Upload again from the same folder and keep the tab open. |
| A ticket reply cannot be posted | Temporary support service interruption | Retry in a few minutes or email support@blobexplorer.com. |
| Banner "Application data unavailable" (Azure Marketplace) | Missing Storage Table Data Contributor role (or a Blob role assigned instead), storage firewall, regenerated key, or deleted storage account | Open Administration → Data storage to see the cause, fix it in Azure, then click Check now, or switch to another storage account. |
Frequently asked questions
Do I need an Azure account?
Yes. You need an Azure Storage account to connect containers. Blob Web Explorer connects to your existing storage; it does not create storage accounts for you.
Does Blob Web Explorer copy my files?
No. Files stay in your storage accounts and are accessed only when a user performs an operation. See the Privacy Policy.
Can I connect storage without sharing a secret?
Yes. With Azure Identity (Entra ID sign-in), access follows the user's Azure RBAC permissions and no secret is stored.
Can someone I shared with share the container again?
No. Only the owner can manage shares or delete the container, whatever the recipient's permission.
Do Admins have access to every container?
In enterprise deployments, Admins can manage all containers. If a container is shared with an Admin with Read permission, that share prevails and the Admin can only read it.
Is Data Lake Storage Gen2 supported?
Yes, through the Blob endpoint. Folders are virtual, and Data Lake directory ACLs are not managed in Blob Web Explorer.
How is the Azure Marketplace edition billed?
Through Azure Marketplace, on your Azure invoice. The Azure resources deployed in your subscription are billed at Azure rates.
What's new
The latest improvements visible to users and administrators. See all release notes.
A new file explorer, simpler plans and Azure Discovery for every role · Version 3.2.0 · October 2026
New
- A brand-new file explorer in the Windows 11 style: switch between your containers from the side pane, browse folders in a tree, and use keyboard shortcuts, drag and drop and right-click menus.
- Preview images, PDF, video, audio and text files without downloading them, and view file properties and metadata.
- Choose a light or dark theme for the file explorer; your choice is remembered in your browser.
- Free, Pro and Enterprise plans. Pro includes 25 containers, 100 active recipients and 5 GB uploads, with monthly or yearly billing (2 months free).
- Support notifications: a counter on the bell icon and the Help menu tells you when our team has replied, and a New badge marks the tickets to open.
- Contact us from the application: choose a topic, send your message and get a reference. Talk to Sales on Compare plans opens it ready for an Enterprise request.
- Discover from Azure is available to Admins, Contributors and Readers of enterprise deployments signed in with Microsoft Entra ID.
- Readers find the containers they linked with their own Azure access under My Linked Containers on the Dashboard.
- Link a discovered container with a SAS URL you generated yourself in the Azure portal.
- Sign-in, sign-up and password reset pages now share the Blob Web Explorer look on desktop and mobile.
Improved
- Your plan limits apply automatically as soon as your payment is confirmed, and return to the Free limits when a subscription ends.
- After a downgrade nothing is deleted: your oldest containers and recipients keep full access, the most recent ones beyond the limits become read-only until you upgrade.
- Large folders open much faster: items load progressively, and downloading several items or folders builds the ZIP on the fly.
- Image thumbnails load faster and appear instantly when you come back to a folder.
- A redesigned Dashboard with compact container cards, a Find any file search and quick filters by file type.
- Clear badges show Personal links and containers whose access expires soon or has expired.
- A share can no longer outlive the access of its container: its end date is prefilled and capped, and its start date is prefilled with today.
- Sharing another container with someone who already has access never uses an additional recipient slot.
- Secure checkout with automatic VAT, and Manage subscription available from Compare plans.
Fixed
- Sharing a container with an existing Blob Web Explorer user no longer fails with "not registered on the platform".
- A failed checkout now shows a clear error message instead of an empty page.
- Usage & costs scans containers linked with a SAS URL instead of reporting them in error.
- Files from expired shares no longer appear in search results.
Security
- Linked containers only use the Azure access of your users: Blob Web Explorer never reaches your storage with its own identity.
- Containers linked with your own Azure access are Personal and cannot be shared; links signed with an Azure account last 7 days at most and end their shares at the same date.
Deployment & administration
- Azure Marketplace deployments can run fully inside your private network, reachable only from your virtual network, with private DNS options.
- The Azure Marketplace setup prefills your Microsoft Entra tenant ID.
- Readers who can access the storage account keys can link containers even when the Azure Storage permission is not allowed; these Personal links last 7 days by default.
Redesigned support and administration, search from anywhere · Version 3.1.10 · October 2026
New
- Search all your containers from anywhere: a search box in the top bar and on the Dashboard finds any file by name or folder path.
- Choose between a light and a dark top bar with one click; your choice is remembered in your browser.
- Administrators of enterprise deployments can display their organization's logo for all users.
Improved
- Redesigned Help & support: follow all your requests with filters and search, and see at a glance when our team is waiting for your answer.
- Opening a case is faster: choose a support request or a bug report, set the impact level and drop your screenshots in the form.
- Each ticket shows where your case stands and the conversation as a chat; reply or reopen a resolved ticket.
- The About page shows your version and deployment details, ready to copy into a support request.
Fixed
- About no longer labels your user ID as a tenant ID, and its documentation, privacy and terms links open the right pages.
Deployment & administration
- Redesigned Admin settings with status at a glance, one-click health checks that explain any problem, and step-by-step guidance to grant roles.
- Move the application data to another storage account in four guided steps; every change is recorded in the activity log.
Simpler Azure Marketplace deployments · Version 3.1.9 · October 2026
Deployment & administration
- New Azure Marketplace deployments no longer create a Key Vault: secrets are stored as encrypted application settings that you cannot read or change.
- The application no longer fails to start when it could not read its secrets in deployments with restricted customer access.
No matching article
Try another keyword, or contact us at support@blobexplorer.com — we are happy to help.
Contact support
Monday to Friday, Central European Time. Include your account email, the page concerned and the exact error message.
- Email: support@blobexplorer.com (security reports with the subject
[SECURITY]). - In the application: open Help & support to create and follow a ticket.
- Commercial question: contact@blobexplorer.com or the contact form.
