Skip to main content
This guide explains how to connect your Azure Blob Storage containers to Mixpeek, enabling automated data ingestion and processing.

​
Prerequisites

  • An active Azure subscription.
  • A Storage Account with Blob Storage containers containing the data you want Mixpeek to process.
  • Permissions to create and manage storage account access keys or managed identities.

​
Configuration Steps

Connecting Mixpeek to Azure Blob Storage requires granting Mixpeek read access to your containers. We recommend using a managed identity or storage account access key for authentication.
1

Configure Storage Account Access

First, you need to configure access to your Azure Blob Storage containers. Choose one of the following methods:Option A: Storage Account Access Key (Simpler Setup)
  1. Navigate to your Storage Account in the Azure Portal.
  2. Go to Access keys under Security + networking.
  3. Copy either the key1 or key2 value. You’ll need this to configure the connection in Mixpeek.
  4. Store the key securely.
Option B: Managed Identity (Recommended for Security)
  1. Navigate to your Storage Account in the Azure Portal.
  2. Go to Access Control (IAM).
  3. Click Add > Add role assignment.
  4. Select the Storage Blob Data Reader role.
  5. Assign access to the managed identity that Mixpeek will use.
2

Configure Container Access

Ensure your container has the appropriate access level:
  1. Navigate to your container in the Azure Portal.
  2. Go to Change access level.
  3. Set the access level to either:
    • Private (no anonymous access) - Use this if you’re using access keys or managed identity
    • Blob (anonymous read access for blobs only) - Use this if you want to allow public read access
  4. Click OK to save the changes.
3

Add Azure Blob Storage Connection in Mixpeek

In Studio, go to Settings > Connections > New Connection and pick Azure Blob Storage.
  1. Choose your authentication method, account key or managed identity.
  2. Enter the storage account name and the container name.
  3. Optionally set a prefix to scope the sync to one folder.
  4. Save. Mixpeek tests the credentials before storing them.
To create the same connection over the API, POST /v1/organizations/connections. The credentials.type field selects the method:
The provider type is azure_blob. A bare azure returns HTTP 422.Managed identity uses DefaultAzureCredential. Set client_id only when you target a specific user-assigned identity; leave it out for the system-assigned one. account_key is redacted when you read the connection back.

​
Verification

Once connected, Mixpeek should start discovering files in your specified Azure Blob container (and prefix, if provided). You can monitor the ingestion status within the Mixpeek Studio. Depending on your pipeline configuration, feature extraction and indexing will begin automatically for supported file types. If you encounter issues, double-check the access permissions and the credentials provided in Mixpeek. Ensure the storage account name, container name, and authentication details are correct.