Documentation & Support

How can we help?

Guides for users and Azure administrators of Blob Web Explorer, the enterprise file explorer for Azure Blob Storage — in SaaS, in a dedicated Enterprise instance, or from Azure Marketplace.

  • Version 3.2.0
  • Updated October 2026
  • Support Monday–Friday, CET

Get started

Overview

A governed, familiar file workspace on top of Azure Blob Storage.

Blob Web Explorer lets business and technical teams work with Azure Blob Storage from a browser, without the Azure portal and without installing software. Your files stay in your own storage accounts; Blob Web Explorer adds the user experience, access control, and traceability.

File explorer

Browse, preview, upload, download, rename, move, copy, and delete — like a desktop file manager.

Controlled sharing

Share a container with Read or Write permission and a validity period, without exposing storage keys.

Search all containers

One search across every container you can access, whatever the storage account: find a file by name, path, or extension and open it in one click.

How search works

Usage & costs

See volumes, top containers, inactive data, and indicative monthly costs.

Activity log

Every file and sharing operation is recorded with user, time, outcome, and IP address.

Customer Hub

Open and follow support tickets directly from the application.

Quick start

From sign-in to your first shared container in about ten minutes.

  1. Sign inOpen app.blobexplorer.com (or your organization's address) and sign in. New SaaS users create an account with their email, a verification code, a password, their country, and their name.
  2. Link your first containerSelect Link a container in the Containers menu (or on Home or Manage containers), choose a connection mode, and enter the container details. See Link a container.
  3. Work with your filesOpen the container from the dashboard, upload a file, and create a folder.
  4. Share with your teamFrom the container details, add a share with Read or Write permission. See Share a container.
  5. Enable searchOpen Workspace → Search all containers → Manage Index and index your containers. From then on, the search box in the top bar finds any file across all of them. See Search all containers.
Choosing an edition? See pricing and the edition comparison. Already deploying from Azure Marketplace? Follow the Azure Marketplace guide.

Use Blob Web Explorer

Home & navigation

Your starting point after sign-in.

The Home page lists the containers you own and the containers shared with you, in separate sections so you always know where the data comes from. Shared containers show their owner and status; expired or disabled shares cannot be opened.

The Find any file search at the top of Home, and the search box in the top bar on the other pages, find a file across all your containers in one query; press Ctrl+K to jump to it. Quick filters list every PDF, Word, Excel, image, CSV or ZIP file in one click. Results come from the search index: index your containers, and re-index after changes, to get complete and up-to-date results. Quick actions take you to Link a container (when you can manage containers) and support. On the SaaS service, your plan and its limits are shown when relevant.

Top menuEntries
DashboardDirect link to Home (everyone)
WorkspaceShared with me, Search all containers (everyone)
ContainersLink a container, Discover from Azure, Manage containers, Usage & costs, Activity log (all SaaS users; Admins and Contributors in enterprise deployments). Discover from Azure is shown when Azure Discovery is enabled and you sign in with Microsoft Entra ID; Readers find it under Workspace.
AdministrationAdmin settings, Data storage, Access & roles, Branding, Deployment checklist (Admins, enterprise deployments)
AccountMy profile (everyone), Plan & billing (SaaS service)
HelpHelp & support, Open a case, Report a bug, About (everyone)

The profile menu (your avatar) gives access to My profile, Plan & billing (SaaS), Help & support, and Sign out.

Light or dark top bar

Use the sun / moon button in the top bar to switch between a light and a dark top bar. Your choice is remembered in your browser.

Your organization's logo

In enterprise deployments, administrators can display their organization's logo at the top left of the application from Administration → Branding. Choose a PNG, JPEG, WebP or SVG file (256 KB maximum), check the preview on the light and dark top bars, then save; the logo applies to every user of the deployment. Restore default logo brings back the Blob Web Explorer logo, and each change is recorded in the activity log.

File explorer

Everyday file operations in a Windows-style explorer: side pane, folder tree, address bar, right-click menus and keyboard shortcuts.

ActionHowPermission
Switch container and browsePick a container in the side pane (yours and the ones shared with you), expand the folder tree, or type a path in the address bar. Large folders load progressively; choose Load more items to continue.Read
Search a folderType in the search box to find files and folders in the current folder and its subfolders. Wildcards * and ? are accepted.Read
Preview and propertiesDouble-click an image, PDF, video, audio or text file to preview it; use Properties to see its size, dates, access tier and metadata.Read
DownloadSelect items and choose Download. Folders and multiple items are downloaded as a ZIP archive.Read
UploadUse Upload to add files to the current folder, with progress for each file.Write
New folder, rename, move, copyUse the command bar, right-click an item, or drag items onto a folder (hold Ctrl to copy). Shortcuts: F2, Ctrl+C, Ctrl+X, Ctrl+V.Write
DeleteSelect items, choose Delete (or press Del), and confirm.Write
Deletes and overwrites are applied directly to your storageWhen you confirm a replacement, existing files are overwritten, and deleted files cannot be restored from Blob Web Explorer. Enable blob soft delete or versioning on your storage account if you need recovery.

The maximum upload size depends on your plan (SaaS) or deployment. Enterprise and Azure Marketplace deployments support files up to 195 GiB through the built-in chunked upload. Keep the browser tab open until the upload reaches 100%. Use the sun/moon button of the explorer to switch between its light and dark themes.

Share a container

Give colleagues or partners access without sharing storage keys.

  1. Open the container detailsFrom Manage containers, select the container you own.
  2. Add a shareEnter the recipient's email address. In enterprise deployments, directory suggestions appear as you type.
  3. Set accessChoose Read or Read and Write, an optional validity period, and an optional reason (up to 255 characters) for the Activity log.
  4. SaveThe container appears in the recipient's Shared with me list. You can disable, extend, or remove the share at any time; Stop sharing removes all shares at once.
  • Only the owner of a container can manage its shares or delete it.
  • A share permission always takes priority over the user's global role: an Admin who receives a Read share can only read that container.
  • On the SaaS service, recipients must have an account (the Free plan is enough). The Free plan includes a few shares; paid plans raise the limit.

Shared with me

All containers others have shared with you, with permission, owner, and validity.

StatusMeaningWhat to do
ActiveThe share is enabled and within its validity period.Open and work normally.
Not yet activeThe validity period has not started.Wait for the start date.
ExpiredThe end date has passed.Ask the owner to extend the share.
DisabledThe owner disabled the share.Contact the owner.

Usage & costs

Volumes, activity, and indicative costs. Available to Contributors and Admins.

  • Totals and top containers by size and number of files.
  • Containers without changes for 90 days are flagged as inactive.
  • Monthly costs are estimates for guidance only; your Azure invoice is the reference.
  • Results are cached for up to 30 minutes, and the analysis of very large containers is capped at 50,000 files.

Activity log

Know who did what, when, and with which result.

Uploads, downloads, deletions, renames, moves, copies, and sharing changes are recorded with the user, the file or folder, the date, the duration, the outcome, any error code, the IP address, and a correlation identifier to share with support.

Container owners see the activity of their containers. In enterprise deployments, Admins can view all containers. Filter by container, action, or result to investigate an incident.

Administer

Roles & permissions

Two layers work together: the application role and the access to each container.

Application roles

AreaReaderContributorAdmin
Home, file explorer, Shared with me, search, help & support✓✓✓
Discover from Azure (Readers: personal links only, never shareable)✓✓✓
Manage and link containers, share, usage & costs, activity log—✓✓
Admin settings (including your organization's logo), Deployment checklist, view all containers——✓

Enterprise roles apply to Platinum and Azure Marketplace deployments. On the SaaS service, every signed-in user has Contributor capabilities, and plan, billing, and account deletion pages are available.

Container access

SituationReadWriteManage & shareDelete containerView logs
Owner✓✓✓✓✓
Shared with Write✓✓———
Shared with Read✓————
Expired or disabled share—————
Owner of a personal link (Azure Identity)Azure roleAzure roleNot shareable✓ (unlink)Admins & Contributors
A share permission always prevails over the global role. Ownership belongs to the user who linked the container and is never transferred by sharing.

Identity & sign-in

How users sign in and receive their role in enterprise deployments.

Microsoft Entra ID — App Roles

Declare the app roles BWE.Admin, BWE.Contributor, and BWE.Reader on the App Registration, then assign users or groups in Enterprise applications.

Azure AD B2C — Groups

Create the groups BWE_Admin, BWE_Contributor, and BWE_Reader and add users directly. Membership is read through Microsoft Graph at sign-in.

  • The sign-in App Registration needs the Microsoft Graph Application permissions User.Read.All, Group.Read.All, and GroupMember.Read.All, with administrator consent.
  • A user without a resolved role signs in with Reader access.
  • After a role or group change, the user signs out and back in to refresh permissions.

Azure Discovery

Find and link existing containers from your Azure subscriptions with your own Azure access. Admins, Contributors and Readers, in enterprise deployments.

  1. Grant the delegated permissionsOn the App Registration, add Azure Service Management → user_impersonation (delegated), and Azure Storage → user_impersonation (delegated) for links based on a Storage Blob Data role. Ask an Entra administrator for consent if your tenant requires it.
  2. Check the Azure permissions of the userReader on the subscriptions, resource groups or storage accounts to list them, plus the access described below to link containers.
  3. Run DiscoveryAdmins and Contributors: Containers → Discover from Azure (also on Manage containers). Readers: Workspace → Discover from Azure or the Dashboard. Select a subscription and click Discover accounts.
  4. Link containersClick Browse on a storage account: the Link containers popup lets you search, select containers, adjust their aliases, and click Link selected. A summary shows the link type, read/write access and access end date of each container.

Link types

WhoAzure access of the userLinkShareable
Admin, ContributorStorage Account Contributor (storage keys allowed)Valid for the configured period (2 years by default)✓
Admin, ContributorStorage Blob Data Reader or Contributor on the storage accountSigned with your Azure account: 7 days maximum, not renewed✓
ReaderStorage Account Contributor or Storage Account Key Operator (storage keys allowed)Personal: valid 7 days by default, not renewed; no Azure Storage consent needed—
Reader (or data role on the container only)Storage Blob Data Reader or ContributorPersonal: opened with your own Azure access, read/write follows your Azure role—
Any roleAny access that lets you generate a container SAS (for example a user delegation SAS with Storage Blob Data Contributor)Link with a SAS URL you generated: paste the container SAS URL in the Link containers popup; valid until the SAS expiresAdmins and Contributors only
A link signed with your Azure account lasts 7 days at most, is never renewed automatically, and stops as soon as you lose your Azure role on the storage account. Shares of that container end at the same date: link the container again after expiry. A share can never outlive the access of its container.
Blob Web Explorer never accesses your storage with its own identity: every link relies on the Azure access of the person who created it. Azure Discovery requires a Microsoft Entra ID sign-in. Readers find their personal links under My linked containers on the Dashboard, can unlink them there, and can never share containers.

Azure Marketplace

Run Blob Web Explorer in your own Azure subscription, billed through your Azure invoice.

What is deployed

  • Linux App Service plan (new, or an existing plan in the same region) and web application (container image)
  • Application Insights for monitoring (new, or an existing resource)
  • Deployment secrets stored as encrypted application settings that you cannot read
  • Managed identity with least-privilege role assignments

What you prepare

  • A sign-in App Registration (Entra ID or Azure AD B2C)
  • App roles or B2C groups for your users
  • Microsoft Graph permissions with admin consent
  • An existing storage account for application data (general-purpose v2, Standard tier)
  • Outbound HTTPS to the BlobExplorer registry and support service

Application data storage

Blob Web Explorer stores its own data (users, linked containers, shares, activity) in tables of a storage account that you provide. It is never created by the deployment and stays under your full control: backup, network rules, retention, and keys. The publisher has no access to it.

Connection methodWhat you provideAfter deployment
Managed identity (recommended)Select the storage account in the deployment form. No secret.Grant the Storage Table Data Contributor role on the storage account to the web application identity, using the command provided in the deployment outputs.
Connection stringThe storage account connection string (account key)Nothing. The connection string is stored securely in your deployment.

Administrators can change the storage account or the connection method at any time from Administration → Data storage: choose the method, test the connection, then switch. The change applies immediately without restart. Existing data is not copied automatically.

If the application data storage is unreachableBlob Web Explorer keeps running. A banner explains the problem; administrators get a direct link to fix it, other users can report it to support. Help & support (open a case, report a bug, deployment facts) remains available.
No publisher credentials to enterAfter deployment, BlobExplorer's provisioning service delivers the registry access and the support key directly into the application settings of your deployment, then restarts the application. You never see or enter these values. The first start can take a few more minutes.

All features are included in the Marketplace edition. Plan and billing pages are not shown in the application because billing is handled by Azure Marketplace.

Open the step-by-step deployment guide

Security & privacy

How Blob Web Explorer protects your data.

Your data stays yours

Files stay in your storage accounts. They are read or written only when a user performs an operation.

Server-side authorization

Every file operation is checked against the user's role and container permissions on the server.

Protected secrets

Previews never expose SAS URLs to the browser. Marketplace secrets are stored as encrypted application settings that customers cannot read.

Transparency

An activity log records operations. See the Privacy Policy for data handling details.

Plans & billing (SaaS)

Manage your subscription from Plan & billing (Account menu or profile menu), organized in three tabs: My plan, Compare plans, and Invoices & payment.

  • Plans. Free and Pro plans differ by the number of containers and active recipients (a person you share with counts once, whatever the number of containers) and by the maximum upload size. Plan details are on the pricing page. Limits are enforced by the service.
  • Subscribe or change plan. On Compare plans, choose monthly or yearly billing (yearly includes 2 months free), then complete payment in Stripe's secure checkout. Your new limits apply automatically within a few moments of payment. Plan changes are prorated.
  • Invoices. Open Invoices & payment to download them from the Stripe customer portal.
  • Cancel or downgrade. Cancellation takes effect at the end of the current period. Your account then moves to the Free plan limits. Nothing is deleted: your oldest containers and recipients, up to the new limits, keep full access; the most recent ones become read-only (files can still be opened and downloaded, but not changed, and those containers cannot be shared). They are flagged Read-only (plan limit). Upgrade again, or remove containers or recipients, to restore write access.
  • Delete your account. My profile → Delete my account removes your profile and linked containers from Blob Web Explorer. Data in your storage accounts is not deleted.

See the Subscription Terms. Platinum and Azure Marketplace editions do not use these pages.

Help

Customer Hub

Create and follow support tickets without leaving the application.

  1. Open Help & supportFrom the Help menu in the top menu or the profile menu. Filter your tickets (In progress, Waiting for you, Resolved) or search them; Reply now appears when our team is waiting for your answer. A red counter on the bell icon and the Help menu tells you when our team has replied; the tickets concerned show a New badge until you open them.
  2. Create a caseChoose Open a case or Report a bug, select the impact level, describe the issue, and drop up to 3 files (10 MB each: PDF, images, DOCX, XLSX, TXT, ZIP). Deployment facts shows the version details support may ask for, with a Copy details button.
  3. Follow upOpen the ticket to see where it stands (Submitted, In progress, Waiting for you, Resolved), the conversation, and attachments. Reply in the same ticket; replying to a resolved ticket reopens it.

Status

OpenIn progressWaiting for youResolvedClosed

Priority

LowMediumHighCritical

Troubleshooting

Quick fixes for the most common situations.

SymptomLikely causeResolution
A container cannot be openedExpired SAS, rotated key, missing RBAC, or storage firewallUpdate the connection, check Azure permissions, or allow network access.
Container opens read-onlyRead share, read-only SAS, or Storage Blob Data Reader roleAsk the owner for Write access or assign Storage Blob Data Contributor.
Azure Identity is not availableYou signed in with Azure AD B2CUse a SAS URL or a connection string, or sign in with Entra ID.
Search returns no resultContainer not indexed yet, or file added after the last indexingOpen Manage Index and run Index or Rebuild. For a shared container, ask its owner to index it.
Admin pages are missingRole not assigned or not refreshedAssign BWE.Admin (or BWE_Admin), then sign out and back in.
Sign-in error AADSTS50011Redirect URI missing on the App RegistrationAdd https://<your-app>/signin-oidc as a Web redirect URI.
Upload stops before 100%Tab closed or network interruptionUpload again from the same folder and keep the tab open.
A ticket reply cannot be postedTemporary support service interruptionRetry in a few minutes or email support@blobexplorer.com.
Banner "Application data unavailable" (Azure Marketplace)Missing Storage Table Data Contributor role (or a Blob role assigned instead), storage firewall, regenerated key, or deleted storage accountOpen Administration → Data storage to see the cause, fix it in Azure, then click Check now, or switch to another storage account.

Frequently asked questions

Do I need an Azure account?

Yes. You need an Azure Storage account to connect containers. Blob Web Explorer connects to your existing storage; it does not create storage accounts for you.

Does Blob Web Explorer copy my files?

No. Files stay in your storage accounts and are accessed only when a user performs an operation. See the Privacy Policy.

Can I connect storage without sharing a secret?

Yes. With Azure Identity (Entra ID sign-in), access follows the user's Azure RBAC permissions and no secret is stored.

Can someone I shared with share the container again?

No. Only the owner can manage shares or delete the container, whatever the recipient's permission.

Do Admins have access to every container?

In enterprise deployments, Admins can manage all containers. If a container is shared with an Admin with Read permission, that share prevails and the Admin can only read it.

Is Data Lake Storage Gen2 supported?

Yes, through the Blob endpoint. Folders are virtual, and Data Lake directory ACLs are not managed in Blob Web Explorer.

How is the Azure Marketplace edition billed?

Through Azure Marketplace, on your Azure invoice. The Azure resources deployed in your subscription are billed at Azure rates.

What's new

The latest improvements visible to users and administrators. See all release notes.

A new file explorer, simpler plans and Azure Discovery for every role · Version 3.2.0 · October 2026

New

  • A brand-new file explorer in the Windows 11 style: switch between your containers from the side pane, browse folders in a tree, and use keyboard shortcuts, drag and drop and right-click menus.
  • Preview images, PDF, video, audio and text files without downloading them, and view file properties and metadata.
  • Choose a light or dark theme for the file explorer; your choice is remembered in your browser.
  • Free, Pro and Enterprise plans. Pro includes 25 containers, 100 active recipients and 5 GB uploads, with monthly or yearly billing (2 months free).
  • Support notifications: a counter on the bell icon and the Help menu tells you when our team has replied, and a New badge marks the tickets to open.
  • Contact us from the application: choose a topic, send your message and get a reference. Talk to Sales on Compare plans opens it ready for an Enterprise request.
  • Discover from Azure is available to Admins, Contributors and Readers of enterprise deployments signed in with Microsoft Entra ID.
  • Readers find the containers they linked with their own Azure access under My Linked Containers on the Dashboard.
  • Link a discovered container with a SAS URL you generated yourself in the Azure portal.
  • Sign-in, sign-up and password reset pages now share the Blob Web Explorer look on desktop and mobile.

Improved

  • Your plan limits apply automatically as soon as your payment is confirmed, and return to the Free limits when a subscription ends.
  • After a downgrade nothing is deleted: your oldest containers and recipients keep full access, the most recent ones beyond the limits become read-only until you upgrade.
  • Large folders open much faster: items load progressively, and downloading several items or folders builds the ZIP on the fly.
  • Image thumbnails load faster and appear instantly when you come back to a folder.
  • A redesigned Dashboard with compact container cards, a Find any file search and quick filters by file type.
  • Clear badges show Personal links and containers whose access expires soon or has expired.
  • A share can no longer outlive the access of its container: its end date is prefilled and capped, and its start date is prefilled with today.
  • Sharing another container with someone who already has access never uses an additional recipient slot.
  • Secure checkout with automatic VAT, and Manage subscription available from Compare plans.

Fixed

  • Sharing a container with an existing Blob Web Explorer user no longer fails with "not registered on the platform".
  • A failed checkout now shows a clear error message instead of an empty page.
  • Usage & costs scans containers linked with a SAS URL instead of reporting them in error.
  • Files from expired shares no longer appear in search results.

Security

  • Linked containers only use the Azure access of your users: Blob Web Explorer never reaches your storage with its own identity.
  • Containers linked with your own Azure access are Personal and cannot be shared; links signed with an Azure account last 7 days at most and end their shares at the same date.

Deployment & administration

  • Azure Marketplace deployments can run fully inside your private network, reachable only from your virtual network, with private DNS options.
  • The Azure Marketplace setup prefills your Microsoft Entra tenant ID.
  • Readers who can access the storage account keys can link containers even when the Azure Storage permission is not allowed; these Personal links last 7 days by default.

Redesigned support and administration, search from anywhere · Version 3.1.10 · October 2026

New

  • Search all your containers from anywhere: a search box in the top bar and on the Dashboard finds any file by name or folder path.
  • Choose between a light and a dark top bar with one click; your choice is remembered in your browser.
  • Administrators of enterprise deployments can display their organization's logo for all users.

Improved

  • Redesigned Help & support: follow all your requests with filters and search, and see at a glance when our team is waiting for your answer.
  • Opening a case is faster: choose a support request or a bug report, set the impact level and drop your screenshots in the form.
  • Each ticket shows where your case stands and the conversation as a chat; reply or reopen a resolved ticket.
  • The About page shows your version and deployment details, ready to copy into a support request.

Fixed

  • About no longer labels your user ID as a tenant ID, and its documentation, privacy and terms links open the right pages.

Deployment & administration

  • Redesigned Admin settings with status at a glance, one-click health checks that explain any problem, and step-by-step guidance to grant roles.
  • Move the application data to another storage account in four guided steps; every change is recorded in the activity log.

Simpler Azure Marketplace deployments · Version 3.1.9 · October 2026

Deployment & administration

  • New Azure Marketplace deployments no longer create a Key Vault: secrets are stored as encrypted application settings that you cannot read or change.
  • The application no longer fails to start when it could not read its secrets in deployments with restricted customer access.

All release notes

Contact support

Monday to Friday, Central European Time. Include your account email, the page concerned and the exact error message.