- Activate the User Administrator role in PIM
- Add the user to the "sta_civicfsprodweb_media_sbdo" group via the Microsoft 365 Admin Center
- Download and install Azure Storage Explorer (https://azure.microsoft.com/en-us/products/storage/storage-explorer/) on the user's computer (Install for me only):

- Launch Azure Storage Explorer
- When the "Select Resource" window appears, click on "Subscription":
- Select "Azure" and then click on "Next":
- A browser tab will open. Log into the user's Microsoft account.
- After logging in/authenticating, go back to Azure Storage Explorer and click on the plug icon on the left hand side (there may be an authentication error next to the account – this can be ignored)
- Select "Blob container"
- Select "Sign in using Azure Active Directory (Azure AD)" and then click "Next":
- Click "Next"
- Enter https://civicfsprodweb.blob.core.windows.net/media in the "Blob container URL" field ("media" will auto-populate in the Display name field) and then click "Next":

- Click "Connect" on the final Summary page to finish
- The "media" folder can now be accessed from within Azure Storage Explorer: