@M.Zhukov I believe you are using the labeling tool to run this container and adding a connection to the blob storage. While providing the SAS URL you only need to provide the following permissions to the container.
- Read
- Write
- Delete
- List
Here are the details from the document.
SAS URL - The shared access signature (SAS) URL of your Azure Blob Storage container. To retrieve the SAS URL, open the Microsoft Azure Storage Explorer, right-click your container, and select Get shared access signature. Set the expiry time to some time after you'll have used the service. Make sure the Read, Write, Delete, and List permissions are checked, and click Create. Then copy the value in the URL section. It should have the form: https://<storage account>.blob.core.windows.net/<container name>?<SAS value>.
If the connection is successful you will be able to use the files in the container after creating a project to run OCR and label them. If the training is successful you can use this model with the analyze API. I hope this helps.