I am struggling with RBAC and ACL permissions for ADLS2. We would like to be able to control who can and cant download files in each of the top folders in an ADLS2 container.

MS Co-Pilot’s response says it is not possible as download permissions are defined at a container level using an RBAC role (storage blob data contributor)

Any recommendations would be much appreciated.