The Azure API log will give you more details BUT as it suggests (or an EQUIVALENT) is enough. When you say you have contributor role, do you mean the default built in role of Contributor (or the storage specific role)? If so it by itself doesn't have the necessary permissions for the data in the storage. On your second question, i haven't tried but i think it will give the same error as it simulates the action.