You need a user delegation token.
https://hadoop.apache.org/docs/stable/hadoop-azure/abfs.html#Shared_Access_Signature_.28SAS.29_Token_Provider
There are three types of SAS supported by Azure Storage:
- User Delegation SAS: Recommended for use with ABFS Driver with HNS Enabled ADLS Gen2 accounts. It is Identity based SAS that works at blob/directory level)
- Service SAS: Global and works at container level.
- Account SAS: Global and works at account level.