A shared access signature (SAS) token provides you with a way to grant your clients with limited access to your Azure Storage Account, without exposing your account access key. An SAS token is useful when running UploaderWiz using a group policy object (GPO), where the access key is exposed to all users who run the GPO. This article provides the steps to generate an SAS token with UploaderWiz.

Sections of this article:

• Prerequisites
• Generate a SAS token for an Azure Storage Account
• Next steps

Prerequisites

• Read the How do I upload files to Microsoft Azure storage using the BitTitan UploaderWiz tool? article to learn more about how UploaderWiz is used with a migration project.
• Download the UploaderWiz ZIP file and extract the contents to the C:\\BitTitan directory.

Generate an SAS token for an Azure Storage Account

Generate the SAS token for an Azure Storage Account using UploaderWiz through the Command Prompt.

Follow these steps to generate a SAS token for an Azure Storage Account:

1. Click Start, and type CMD.
2. In the search results, right-click Command Prompt, and select Run as administrator.
3. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
4. Type this command, and then press Enter:
   
   cd C:\
5. Type this command, and then press Enter:
   
   cd C:\BitTitan
   
   Note: This command assumes that you extracted the contents of the UploaderWiz ZIP file to the C:\BitTitan directory as directed in the Prerequisites section of this article.
6. Type this command, and then press Enter to generate the SAS token:
   
   UploaderWizexe -command generatetoken -type azureblobs -accesskey <access key> -secretkey <secret key> -container <container name>
   
   Define the following parameters in your version of the command:
   1. Enter the Azure Storage Account name for the <access key>
   2. Enter the primary access key for the <secret key>
      
      For more information: Read the Manage your storage access keys topic from Microsoft.
   3. Enter the storage container name for the <container name>
7. You should see a response like the one shown below:
   
   
   
   Note: If you see a 403 Forbidden response, you might have defined an incorrect parameter. Confirm that the parameters are accurate, and try again.
8. Copy the output command, or the SAS token if that is all you need.

Next Steps

• You can use the SAS token with UploaderWiz as directed in the How do I upload files to Microsoft Azure storage using the BitTitan UploaderWiz tool?
• Refer to one of these migration guides for more information about how to use UploaderWiz with a specific migration scenario:
  • EML to Office 365 Migration Guide
  • File Server File Shares to Dropbox Shared Folders Migration Guide
  • File Server File Shares to SharePoint Online Migration Guide
  • File Server Home Directories to Dropbox Migration Guide
  • File Server Home Directories to OneDrive for Business Migration Guide
  • File Server Home Directories to OneDrive for Business Migration Guide, Using PowerShell
  • File Server to Office 365 Groups Files Migration Guide
  • Google Vault Migration Guide
  • PST to G Suite Migration Guide
  • PST to Office 365 Migration Guide