(perform_data_egress_ase)=

# Data egress with Azure Storage Explorer

:::{important}
You must be able to receive a secure email.
We use the [Egress secure email](https://www.egress.com/) service, which is free to setup for receiving secure emails.
:::

:::{important}
You must know the public IP address(es) that are used by the people in your organisation who will be downloading the data.
Talk to your IT team if you're not sure what these are.
:::

1. Send your IP address(es) and email address to the {ref}`role_trusted_research_data_manager`

2. Download and install [Azure Storage Explorer](https://azure.microsoft.com/en-us/products/storage/storage-explorer/)

3. Wait until you receive a {ref}`secure email <send_secure_email>` containing a secure access token, which has **read** and **list** privileges, allowing you to download the files.

4. Open Azure Storage Explorer and click the socket image on the left hand side

    :::{image} ../images/azure_storage_explorer_connect.png
    :alt: Azure Storage Explorer connection
    :align: center
    :::

5. On `Select Resource`, choose `Blob container`

6. On `Select Connection Method`, choose `Shared access signature URL (SAS)` and hit `Next`

    :::{image} ../images/connect_azure_storage.png
    :alt: Connect with SAS token
    :align: center
    :::

7. On `Enter Connection Info`:
    - Set the `Display name` to "egress" (or choose an informative name)
    - Copy the `Blob SAS URL` from your Azure portal session into the `Blob container SAS URL` box and hit `Next`

8. On the `Summary` page, hit `Connect`

9. On the left hand side, the connection should show up under `Local & Attached > Storage Accounts > (Attached Containers) > Blob Containers > ingress (SAS)`

10. You should now be able to securely download the data from the Safe Haven's output volume by highlighting the relevant file(s) and hitting the `Download` button

11. Let the {ref}`role_trusted_research_data_manager` team know whether egress was successful, asking for help if something went wrong