diff --git a/conf/azurebatch.config b/conf/azurebatch.config
index 797e1477f..68731a016 100644
--- a/conf/azurebatch.config
+++ b/conf/azurebatch.config
@@ -8,6 +8,7 @@ params {
     storage_name      = null
     storage_key       = null
     storage_sas       = null
+    storage_duration  = '48h'
 
     // Batch
     az_location       = "westus2"
@@ -37,9 +38,10 @@ azure {
         queue = params.az_worker_pool
     }
     storage {
-        accountName = params.storage_name
-        accountKey  = params.storage_key
-        sasToken    = params.storage_sas
+        accountName   = params.storage_name
+        accountKey    = params.storage_key
+        sasToken      = params.storage_sas
+        tokenDuration = params.storage_duration
     }
     batch {
         location                = params.az_location
diff --git a/docs/azurebatch.md b/docs/azurebatch.md
index 716761a2d..3b6da49ad 100644
--- a/docs/azurebatch.md
+++ b/docs/azurebatch.md
@@ -17,6 +17,10 @@ Access key to Azure blob storage account. `--storage_key` or `--storage_sas` are
 
 SAS for access to Azure blob storage account (see relevant permissions on Nextflow documentation). `--storage_key` or `--storage_sas` are required, but not both.
 
+### --storage_duration
+
+The duration of the shared access signature token created by Nextflow when the `--storage_sas` option is not specified (default: `48h`). Make sure to increase this for large and expensive workflows!
+
 ### `--az_location`
 
 The Azure Batch region where the computation is executed in VMs. Default (`westus2`).