Just posted a new video walking through Blob permission options in Azure Storage including using the access key, shared access signatures, storage access policies and the new user delegation key with Azure AD and ARM RBAC integration.
The whiteboard from this video is below.
Blog of John Savill 