title: RBAC access to Azure Storage - preview roles not acting as expected
body: <p>I'm trying to give our operations team read-only access to a storage account containing log files. I'd like to be able to give them the right to enumerate containers and read blobs. Ideally that would be the extent of their access.</p>
  
  <p>There are a couple of RBAC roles in preview that looked promising: </p>
  
  <ul>
  <li>Storage Blob Data Reader (Preview) is described as "Allows for read access to Azure Storage blobs containers and data" which sounds exactly like what I'm after</li>
  <li>Storage Blob Data Contributor (Preview) sounds like read/write to blob accounts</li>
  </ul>
  
  <p>Neither of these roles worked for me, however. The operations group is unable to use Azure Storage Explorer or the web to examine blob contents. It looks like the roles don't provide access to the key APIs.</p>
  
  <p>I'm wondering where the gap is between what I'm hoping to do and what the new preview roles offer. Can I accomplish this without defining custom roles in the tenant?</p>