Assign a "managed service identity" (MSI) to the Function App Grant "Reader" privilege on the subscription (or a resource group) Grant "Storage Blob Data Contributor" permissions on your storage accounts Observe what the time-triggered function is doing