You need a user delegation token. https://hadoop.apache.org/docs/stable/hadoop-azure/abfs.html#Shared_Access_Signature_.28SAS.29_Token_Provider

There are three types of SAS supported by Azure Storage:

• User Delegation SAS: Recommended for use with ABFS Driver with HNS Enabled ADLS Gen2 accounts. It is Identity based SAS that works at blob/directory level)
• Service SAS: Global and works at container level.
• Account SAS: Global and works at account level.