Share via

How to give cross tenant access to azure user assigned managed identity

MLW104 11 Reputation points
2024-01-04T16:37:34.8066667+00:00

Hello,

Imaging the following scenario.

I have an azure storage account, a client would like to get data from that storage account. They would like to use azure data factory to do that.

My initial thought was they would create an managed ID in their tenant, they would give me the id details and I could then grant that account the correct read permissions on the storage account. However further reading has said this isn't possible.

What would be the best approach to accomplish the above

Azure Data Factory
Azure Data Factory
An Azure service for ingesting, preparing, and transforming data at scale.
11,608 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
25,048 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Nandan Hegde 36,066 Reputation points MVP Volunteer Moderator
    2024-01-04T19:34:42.57+00:00

    Hey, in order to use managed identity authentication both the components needs to be in the same tenant. For accessing blob storage from adf present in diff tenant, the choice would be to use service principal authentication (app within the blob tenant), else sas authentication and worst case scenario access key authentication

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.