Glossary
Search Azure terms
Open a clear definition, then continue into exam context, architecture, commands, operational examples, common mistakes, and related concepts.
Search all
Commands
Learning guides
Concept graph
Compare
Search-first Azure knowledge base
Term results
Search for a term or click a category. Results render only after you ask for them, so the glossary does not dump every available term on first load. Each result includes Quick peek and Open full term page actions.
Start with a search or a category.
Try managed identity , resource group , az group , private endpoint , or click Databases to load all database-related terms.
Showing 50 of 1,981 matching terms. Narrow the search to reduce the list.
Storage
learning-path-anchor
Sync group
A sync group is the container that tells Azure File Sync which cloud file share and which Windows Server folders should stay synchronized. Think of it as one file namespace with a hub in Azure and one or more on-premises or edge locations attached to it. If two groups represent different shares or business...
Files, queues, and tables
fundamentals
6 commands
Aliases: Azure File Sync group, file sync group, sync topology, storage sync group
Quick peek
Open full term page
Storage
premium
Azure file share
An Azure file share is a managed cloud share hosted by Azure Files. It behaves like a network file share, but Microsoft runs the storage service instead of your team maintaining file servers, disks, operating systems, and failover.
Files, queues, and tables
fundamentals
5 commands
Aliases: Azure Files share
Quick peek
Open full term page
Storage
premium
Share snapshot
A share snapshot is a point-in-time copy of an Azure file share. Azure Files supports snapshots for SMB and NFS shares, letting administrators view, restore, or copy previous versions of files while existing snapshots remain until explicitly deleted or managed by policy.
Files, queues, and tables
fundamentals
5 commands
Aliases: Azure Files share snapshot, file share snapshot, share snapshot, Azure file share point-in-time copy, snapshot share
Quick peek
Open full term page
Storage
premium
ZRS redundancy
ZRS redundancy is the storage-account redundancy setting that enables zone-redundant storage. It synchronously replicates data across availability zones in the primary Azure region, so blobs, files, queues, and tables can remain accessible during a zonal outage without relying on asynchronous secondary-region replication.
Storage accounts
fundamentals
5 commands
Aliases: Standard_ZRS, Premium_ZRS, ZRS SKU, zonal redundancy, zone redundant SKU
Quick peek
Open full term page
Storage
premium
Cloud endpoint
In Azure File Sync, a cloud endpoint is a pointer to an Azure file share; server endpoints synchronize with the cloud endpoint, making the file share the sync hub.
Files, queues, and tables
intermediate
3 commands
Aliases: No aliases yet
Quick peek
Open full term page
Storage
premium
Cloud tiering
A storage feature or access model in Files, queues, and tables that helps teams store, protect, move, and govern application or analytics data with clearer ownership, safety, and operational context.
Files, queues, and tables
fundamentals
3 commands
Aliases: No aliases yet
Quick peek
Open full term page
Storage
complete
Storage account access key
A storage feature or access model in Storage accounts that helps teams store, protect, move, and govern application or analytics data with clearer ownership, safety, and operational context.
Storage accounts
advanced
10 commands
Aliases: storage access key, account key, shared key, storage key
Quick peek
Open full term page
Storage
complete
Storage account kind
A storage feature or access model in Storage accounts that helps teams store, protect, move, and govern application or analytics data with clearer ownership, safety, and operational context.
Storage accounts
advanced
10 commands
Aliases: storage account type, account kind, Azure Storage account type, StorageV2 kind
Quick peek
Open full term page
Storage
field-manual-complete
Premium file share
A premium file share is a high-performance Azure file share for workloads that still need a shared file system.
Files, queues, and tables
fundamentals
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Storage
field-manual-complete
Storage Sync Service
A Storage Sync Service is the Azure File Sync management resource that represents registered Windows file servers and sync groups. It coordinates cloud endpoints in Azure file shares, server endpoints on Windows Server, cloud tiering, monitoring, and the trust relationship required to synchronize files safely.
Files, queues, and tables
advanced
5 commands
Aliases: Azure Storage Sync Service, Azure File Sync service, storage sync resource, Azure File Sync management service
Quick peek
Open full term page
Storage
complete
Storage account
Microsoft Learn describes an Azure storage account as the resource that contains Azure Storage data objects such as blobs, files, queues, and tables. It provides a unique namespace for data accessible over HTTP or HTTPS, with durability, availability, security, and scalability choices.
Storage account
intermediate
5 commands
Aliases: storage-account, Storage account, Azure Storage account, general-purpose storage account, GPv2 storage account, storage account resource
Quick peek
Open full term page
Storage
premium
Azure NetApp Files
Azure NetApp Files provides managed enterprise SMB and NFS volumes in Azure for performance-sensitive file workloads.
Backup and recovery
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Storage
premium
Data Lake filesystem
Data Lake filesystem is the compact API and CLI naming for the ADLS Gen2 file-system resource that contains directories and files.
Data Lake Storage Gen2
fundamentals
5 commands
Aliases: filesystem, ADLS filesystem, storage fs, Azure storage fs
Quick peek
Open full term page
Storage
premium
Kerberos authentication for Azure Files
Kerberos authentication for Azure Files is the identity-based SMB authentication option that lets Azure file shares use Kerberos with a supported directory identity source instead of only storage keys or SAS.
Azure Files
advanced
5 commands
Aliases: Azure Files Kerberos, Microsoft Entra Kerberos for Azure Files, identity-based authentication for Azure Files, SMB Kerberos Azure Files
Quick peek
Open full term page
Storage
premium
Azure Files backup
Azure Files backup protects Azure file shares using Azure Backup policies, recovery points, snapshots, and supported vaulted backup options. It helps backup and platform teams recover shared file data after accidental deletion, ransomware, or operator mistakes without managing separate backup servers or unreviewed snapshot scripts. You see it when business file shares need retention, recovery testing, policy enforcement, ransomware recovery, or evidence for data protection audits. It still needs ownership, network design, monitoring, and recovery planning. Operators need repeatable evidence for deployment, protection, troubleshooting, and reviews, not screenshots or tribal knowledge.
Backup and recovery
intermediate
4 commands
Aliases: Azure file share backup, Azure Backup for Azure Files
Quick peek
Open full term page
Storage
premium
Azure Files NFS
Azure Files NFS is the Azure Files capability for mounting managed file shares from Linux clients using the NFS protocol. It helps Linux, analytics, and platform teams run shared-file workloads without building their own NFS servers without maintaining NAS hardware or custom Linux file servers. You see it when Linux applications need shared storage, analytics jobs need common paths, or teams want managed NFS access with Azure storage operations. It still needs ownership, network design, monitoring, and recovery planning. Operators need repeatable evidence for deployment, protection, troubleshooting, and reviews, not screenshots or tribal knowledge.
NFS file shares
intermediate
4 commands
Aliases: NFS Azure file shares, Azure Files NFS protocol
Quick peek
Open full term page
Storage
premium
Azure Files NFS share
Azure Files NFS share is a specific Azure file share created for NFS access rather than SMB access. It helps Linux application owners and storage teams give workloads a managed shared POSIX-style file path without operating separate NFS appliances for every project. You see it when research clusters, Linux application farms, container platforms, or data processing systems need one shared path across many clients. It still needs ownership, network design, monitoring, and recovery planning. Operators need repeatable evidence for deployment, protection, troubleshooting, and reviews, not screenshots or tribal knowledge.
NFS file shares
intermediate
4 commands
Aliases: NFS file share, NFS Azure file share
Quick peek
Open full term page
Storage
premium
Azure Files premium share
Azure Files premium share is an Azure Files share backed by premium storage for workloads that need predictable capacity, IOPS, and throughput. It helps application and storage architects give latency-sensitive file workloads managed storage with provisioned performance without guessing whether standard file shares can meet peak demand. You see it when profile containers, engineering tools, build systems, analytics staging, or transactional applications require faster shared file access. It still needs ownership, network design, monitoring, and recovery planning. Operators need repeatable evidence for deployment, protection, troubleshooting, and reviews, not screenshots or tribal knowledge.
Premium file shares
intermediate
4 commands
Aliases: Premium Azure file share, SSD Azure file share
Quick peek
Open full term page
Storage
premium
Azure Files private endpoint
Azure Files private endpoint connects Azure file share traffic to a storage account through a private IP address in a virtual network. It helps network, security, and storage teams keep SMB or NFS access on private network paths without exposing file access directly over public endpoints. You see it when regulated workloads need private access, branch users connect through VPN, or applications must mount shares without public storage exposure. It still needs ownership, network design, monitoring, and recovery planning. Operators need repeatable evidence for deployment, protection, troubleshooting, and reviews, not screenshots or tribal knowledge.
Private connectivity
intermediate
4 commands
Aliases: Private endpoint for Azure Files, Azure Files Private Link
Quick peek
Open full term page
Storage
premium
Azure Files SMB
Azure Files SMB is the Azure Files capability for mounting managed file shares through the Server Message Block protocol. It helps Windows, app, and infrastructure teams move familiar mapped-drive and application share patterns to Azure without running and patching Windows file servers for common shared storage. You see it when Windows users need mapped drives, apps expect UNC paths, profile containers need shared storage, or branch offices need cloud-backed shares. It still needs ownership, network design, monitoring, and recovery planning. Operators need repeatable evidence for deployment, protection, troubleshooting, and reviews, not screenshots or tribal knowledge.
SMB file shares
intermediate
4 commands
Aliases: SMB Azure file shares, Azure Files SMB protocol
Quick peek
Open full term page
Storage
premium
Azure Files SMB share
Azure Files SMB share is a specific Azure file share exposed through SMB for users, Windows applications, or services that need a shared UNC path. It helps application owners and desktop teams provide a managed mapped-drive style location without building another Windows Server just for one share. You see it when department folders, Windows application data, FSLogix profiles, installation repositories, or shared reports need cloud-backed SMB access. It still needs ownership, network design, monitoring, and recovery planning. Operators need repeatable evidence for deployment, protection, troubleshooting, and reviews, not screenshots or tribal knowledge.
SMB file shares
intermediate
4 commands
Aliases: SMB file share, SMB Azure file share
Quick peek
Open full term page
Storage
premium
Azure Tables API
Azure Cosmos DB for Table provides an API for table-style key-value data where entities are identified by partition key and row key, supporting applications written for Azure Table storage that need premium capabilities.
Table Storage
intermediate
4 commands
Aliases: Azure Table API, Cosmos DB for Table API, Azure Table Storage API
Quick peek
Open full term page
Analytics
premium
Delta Live Tables
Delta Live Tables is the former name for Lakeflow Spark Declarative Pipelines, a Databricks framework for declarative batch and streaming pipelines using SQL or Python.
Azure Databricks
intermediate
4 commands
Aliases: DLT, Lakeflow Spark Declarative Pipelines, Databricks declarative pipelines, Lakeflow pipelines
Quick peek
Open full term page
Storage
premium
Filesystem in Data Lake Storage
Filesystem in Data Lake Storage is the top-level container-like namespace in Azure Data Lake Storage Gen2 that holds directories and files in Azure.
Data Lake Storage Gen2
intermediate
4 commands
Aliases: Filesystem in Data Lake Storage, filesystem in data lake storage
Quick peek
Open full term page
Storage
premium
Local filesystem
Microsoft Learn describes App Service file access as a managed sandbox with persistent and temporary filesystem locations for deployed content, logs, and runtime operations. Apps can read and write allowed paths, but storage behavior differs by platform, plan, and deployment method.
Storage
advanced
4 commands
Aliases: No aliases yet
Quick peek
Open full term page
Storage
learning-path-anchor
Data Lake storage account
A storage feature or access model in Data Lake Storage Gen2 that helps teams store, protect, move, and govern application or analytics data with clearer ownership, safety, and operational context.
Data Lake Storage Gen2
advanced
19 commands
Aliases: No aliases yet
Quick peek
Open full term page
Storage
field-manual-complete
Azure Files
Azure Files provides managed SMB and NFS file shares in Azure for applications, users, containers, and virtual machines that still need file-system access.
Managed file shares
fundamentals
5 commands
Aliases: Azure file shares, Azure managed file shares, cloud file shares
Quick peek
Open full term page
Storage
field-manual-complete
Private endpoint for Azure Files
A private endpoint for Azure Files is the private network path to file shares in a storage account. Instead of mounting or accessing the share through the public file endpoint, clients in approved networks reach a private IP tied to the file service. The share, authentication model, and storage account still matter; the endpoint only changes network reachability. It is especially important for SMB access from Azure workloads, virtual desktops, build systems, and hybrid clients connected through VPN or ExpressRoute.
Azure Files
advanced
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Integration
verified
Receive and delete
Receive and delete is an Azure Service Bus receive mode where the broker considers a message settled as soon as it sends the message to the receiver. If transfer or processing fails afterward, the message is lost instead of being redelivered.
Azure Service Bus
intermediate
5 commands
Aliases: ReceiveAndDelete, receive-and-delete mode, destructive read, at-most-once receive
Quick peek
Open full term page
Integration
verified
Receive-and-delete mode
A integration pattern or service capability in Messaging that helps teams connect services reliably without tightly coupling every component with clearer ownership, safety, and operational context.
Messaging
fundamentals
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Storage
command-rich
Primary storage region
The primary storage region is the home region for an Azure Storage account. When an application writes blobs, files, queues, or tables under normal conditions, it writes to the primary region. Microsoft Learn anchors this term in Data redundancy - Azure Storage, but this field-manual definition is intentionally wider than an older short glossary entry because the page must teach what to inspect, what can break, who owns the decision, and which evidence proves the Azure environment is behaving as intended. In field use, start with the technical boundary: Technically.
Storage platform
intermediate
4 commands
Aliases: No aliases yet
Quick peek
Open full term page
Storage
premium
Data Lake raw zone
A storage feature or access model in Data Lake Storage Gen2 that helps teams store, protect, move, and govern application or analytics data with clearer ownership, safety, and operational context.
Data Lake Storage Gen2
fundamentals
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Storage
premium
Data Lake silver layer
A storage feature or access model in Data Lake Storage Gen2 that helps teams store, protect, move, and govern application or analytics data with clearer ownership, safety, and operational context.
Data Lake Storage Gen2
fundamentals
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Storage
premium
General-purpose v2 storage account
General-purpose v2 storage account is an Azure Storage account resource using the StorageV2 kind to host common storage services under one managed namespace. Teams use it to provide durable storage for applications while centralizing endpoints, redundancy, encryption, lifecycle management, networking, monitoring, and access control. In daily Azure work, it appears when engineers provision blob containers, file shares, queues, tables, static websites, backups, application artifacts, or Data Lake Gen2-enabled storage in a landing zone. It is not a specific blob container, an unlimited performance guarantee, an identity provider, or a safe design unless access, networking, and data protection are configured.
Storage accounts
beginner
5 commands
Aliases: Azure general-purpose v2 storage account, GPv2 storage account, StorageV2 storage account
Quick peek
Open full term page
Storage
premium
Infrastructure encryption for storage
Infrastructure encryption for storage controls how Azure Storage applies optional double encryption to blobs, files, queues, or tables depending on account and scope configuration. Teams see it in storage account creation, encryption blade. It is not blob immutability, soft delete, encryption in transit, customer-managed key rotation, or disabling shared key authorization; confusing them can create storage accounts that cannot meet compliance, rebuild-only remediation. Use the term when reviewing access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same setting, resource, or behavior.
Azure Storage Security
Intermediate
5 commands
Aliases: storage infrastructure encryption, storage account double encryption, require infrastructure encryption, double encryption for Azure Storage
Quick peek
Open full term page
Analytics
learning-path-anchor
Synapse SQL external table
A Synapse SQL external table is database metadata that lets Synapse SQL query files stored outside the database, usually in Azure Storage or ADLS Gen2. It references an external data source, file format, and file location for governed SQL analytics.
Synapse Analytics
fundamentals
6 commands
Aliases: external table in Synapse, Synapse external table, SQL external table, external table over lake files
Quick peek
Open full term page
Storage
premium
Geo-zone-redundant storage
Geo-zone-redundant storage is an Azure Storage redundancy choice that combines zone redundancy in the primary region with asynchronous replication to a paired secondary region. Teams use it to protect data from zonal failures and regional disasters while keeping one storage account pattern for blobs, Data Lake paths, queues, tables, or files where supported. In daily Azure work, it shows up when engineers select Standard_GZRS or Standard_RAGZRS, compare ZRS with GRS, approve resilient storage standards, or investigate why an account is more expensive than LRS.
Storage redundancy
intermediate
4 commands
Aliases: GZRS, Standard_GZRS, read-access geo-zone-redundant storage, RA-GZRS
Quick peek
Open full term page
Storage
premium
Microsoft-managed key for storage
Microsoft-managed key for Storage means the default Azure Storage encryption approach where Microsoft manages the keys that protect stored data at rest. Teams should manage it with clear ownership, monitoring, rollback evidence, and production change discipline.
Storage encryption
advanced
4 commands
Aliases: platform-managed key for storage, PMK for storage, Microsoft managed storage encryption key
Quick peek
Open full term page
Storage
premium
Minimum TLS version for Storage
Minimum TLS version for Storage is a storage account setting that rejects client connections using TLS versions below the configured minimum. Teams should manage it with clear ownership, monitoring, rollback evidence, and production change discipline.
Storage security
intermediate
4 commands
Aliases: TLS minimum for storage, TLS1_2 storage, minimum TLS for Azure Storage, minimumTlsVersion, storage minimum TLS
Quick peek
Open full term page
Storage
field-manual-complete
Storage endpoint
A storage endpoint is the service URL used to reach an Azure Storage account data service, such as Blob, Data Lake Storage, File, Queue, Table, or static website hosting. Endpoints identify where clients connect, while authorization, firewall rules, DNS, and private endpoints determine whether access succeeds.
Storage platform
intermediate
5 commands
Aliases: storage service endpoint, Azure Storage endpoint, storage account endpoint, storage URL
Quick peek
Open full term page
Storage
field-manual-complete
Storage firewall network rule
An allow rule that permits selected network sources to reach an Azure Storage account public endpoint.
Storage networking
intermediate
5 commands
Aliases: storage firewall rule, storage account firewall network rule, Azure Storage network ACL rule, storage account network allow rule, Azure Storage firewall network rule, storage account network ACL rule, storage account firewall subnet rule
Quick peek
Open full term page
Storage
field-manual-complete
Storage network rules
The selected-network rules that control which sources can reach an Azure Storage account public endpoint.
Storage networking
Intermediate
5 commands
Aliases: storage account network rules, storage firewall rules, storage network ACLs, selected network access, storage account firewall allowlist
Quick peek
Open full term page
Storage
complete
Shared Key
An Azure Storage authorization method that signs requests with a storage account access key.
Access control
fundamentals
5 commands
Aliases: storage Shared Key, account key authorization, storage account key, Shared Key auth
Quick peek
Open full term page
Storage
complete
Standard storage account
Microsoft Learn describes a standard general-purpose v2 storage account as the recommended account type for most Azure Storage scenarios. It provides a namespace for blobs, Azure Files, queues, tables, and Data Lake Storage capabilities, with standard redundancy choices such as LRS, ZRS, GRS, RA-GRS, GZRS, and RA-GZRS.
Storage accounts
intermediate
5 commands
Aliases: standard-storage-account, Standard storage account, standard general-purpose v2 storage account, standard GPv2 storage account, Azure Storage standard account, StorageV2 standard account
Quick peek
Open full term page
Storage
complete
Storage account secure transfer required
Storage account secure transfer required is an account setting that rejects non-secure requests to Azure Storage. When enabled, REST calls must use HTTPS, helping protect authentication material and data in transit from exposure or network interception. It is commonly enabled by default and governed through policy.
Storage accounts
fundamentals
5 commands
Aliases: Storage account secure transfer required, storage account secure transfer required, storage-account-secure-transfer-required, secure transfer required, HTTPS only storage, enableHttpsTrafficOnly
Quick peek
Open full term page
Storage
field-manual-complete
Customer-managed key for storage
Customer-managed key for storage is an Azure Storage encryption option where the account uses a key stored in Key Vault or Managed HSM to wrap storage encryption keys.
Storage accounts
advanced
4 commands
Aliases: Customer-managed key for storage
Quick peek
Open full term page
Storage
field-manual-complete
Secure transfer required
Secure transfer required means the storage account refuses insecure HTTP traffic.
Storage platform
intermediate
4 commands
Aliases: HTTPS-only storage, enableHttpsTrafficOnly, secure transfer to storage accounts
Quick peek
Open full term page
Compute
premium
Azure Functions
Azure Functions is Azure serverless compute for running code from triggers such as HTTP requests, queues, timers, events, and service integrations without managing servers.
Serverless compute
intermediate
6 commands
Aliases: Functions, Function App, serverless functions
Quick peek
Open full term page
Storage
premium
Data Lake curated zone
The governed, consumer-ready area of a data lake where cleaned, conformed, and documented datasets are served for reporting, analytics, AI, or downstream applications.
Data Lake Storage Gen2
Intermediate
6 commands
Aliases: No aliases yet
Quick peek
Open full term page
Analytics
premium
External file format
An External file format is a database object that describes the file type, delimiter, compression, and parsing options used to read or write external data. Teams use it to tell SQL engines how to interpret external files such as delimited text, Parquet, ORC, or compressed data before external tables and CETAS jobs use them. It is not the data source location, the external table schema, the actual lake file, or a guarantee that every file in a folder has the same structure.
Synapse SQL and data virtualization
intermediate
6 commands
Aliases: CREATE EXTERNAL FILE FORMAT, PolyBase file format, Synapse external file format
Quick peek
Open full term page
No glossary terms matched that search.
Try a service name, acronym, command group, or category such as RBAC , az group , App Service , Application Insights , Databases , or Azure AI Search .
Clear filters and show matches
Reset search