You can use the shared key authentication to connect to Microsoft Azure Data Lake Storage Gen2 using the account name and account key.

You can use access control lists to grant different levels of permissions to access directories and files to each user and service. If you do not want to use role-based access control to grant access to all of the data in a storage account, you can use access control lists to grant read, write, and execute permissions to a specific directory or file.