RBAC for Storage Explorer in portal
Today Azure Storage Explorer in Azure Portal uses SAS authentication. When a user opens Storage Explorer in portal, it sends a listkey API call to retrieve the storage keys.
This will be an explorer problem if some one uses RBAC to limit the access to storage keys. If some one need to access the storage explorer, it will read the access keys even with the read only access.
However, I don't know there is any other way to access the storage without access key(AAD may be).
I know currently, the Azure Storage Explorer in portal does not support RBAC (like previous description). Is there any plan to add the support like the console storage explorer in the future?