How to provide shared file storage for the company offices in Azure

Create a storage account for shared files. In the portal, search for and select Storage accounts. Select Create. For the resource group select Create new and name the resource group. Enter in a Storage account name. Set the Performance to Premium. Set the Premium account type to File shares. Set the Redundancy to Zone-redundant storage. Select Review + Create and once the resource group is deployed, select go to resource.

To create a file share, in the storage account, under Data storage, select File shares. Select + File share and enter a name. Take default options and click create. To add a directory to the file share, select the file share and select + Add directory. Name the new directory.
Select Browse and select the finance directory. Upload a file.

To protect against accidental deletion of files, use snapshots. Select your file share. In the Operations section, select Snapshots. Select + Add snapshot. Select OK. Select your snapshot and verify your file directory and uploaded file are included. Return to the file share and navigate to the file directory. Find the uploaded file and in the Properties pane select Delete. Select the Snapshots blade and then select your snapshot. Locate the file you want to restore, Select the file and select Restore. Provide a Restored file name. Verify your file directory has the restored file.

Lastly configure restricting storage access to selected virtual networks. Search for and select Virtual networks. Select Create. Select the resource group. Name the virtual network. select Review + create.
Once deployed, click go to resource.

In the Settings section, select Subnets. Choose the default subnet. In the Service endpoints section choose Microsoft.Storage in the Services drop-down. Save changes.

To restrict access, return to your files storage account. In the Security + networking section, select Networking. Change the Public network access to Enabled from selected virtual networks and IP addresses. In the Virtual networks section, select Add existing virtual network. Select your virtual network and subnet and click Add. Save changes.

Select the Storage browser and navigate to your file share. Verify the message not authorized to perform this operation.