title: Azure Storage Network Security Group
body: <p>I want to add an Azure storage account to a VNet / Network Security Group but keep receiving an Authorisation Failure message.</p>
  
  <blockquote>
    <p>The error was: 'code: AuthorizationFailure content: _CYCLIC_OBJECT_ message: This request is not authorized to perform this operation.</p>
  </blockquote>
  
  <p>I've added the VNet to the storage account with the Microsoft.Storage service endpoint and the subnets have been associated with the NSG.</p>
  
  <p>I've created an inbound rule for the IP addresses and an outbound rule using the storage service tag on the NSG.</p>
  
  <p>I've even tried it with an all internet inbound rule but no joy.</p>
  
  <p>If I whitelist the IP address in the Firewall and Virtual Network settings on the storage account then it works fine.</p>
  
  <p>Is there something that I'm missing?</p>