Write an Azure ARM Template to give read and write access to a managed Identity for accessing container in a storage account which is in different subscription from the subscription where managed identity is.

Question

Write an Azure ARM Template to give read and write access to a managed Identity for accessing storage account and as well as container in a storage account which is in different subscription from the subscription where managed identity is..

Answer 1

@Sayantan Gangopadhyay

You can add user-assigned managed identity to the resource in another subscription by adding the following to your ARM template.

 "identity": {
            "type": "UserAssigned",
            "userAssignedIdentities": {
               "/subscriptions/<Azure-subscription-ID>/resourceGroups/<Azure-resource-group-name>/providers/Microsoft.ManagedIdentity/userAssignedIdentities/<user-assigned-identity-name>": {}
            }

Here's a sample ARM template that does the same for Azure Logic Apps, instead of storage for your reference: https://learn.microsoft.com/en-us/azure/logic-apps/create-managed-service-identity?tabs=consumption#create-user-assigned-identity-in-an-arm-template

If you have any questions, let me know in the "comments".

If this helps, 'Accept answer' and 'mark as helpful' so that it can help others in the community looking for help on the same topic.