How to give cross tenant access to azure user assigned managed identity

MLW104 11 Reputation points
2024-01-04T16:37:34.8066667+00:00

Hello,

Imaging the following scenario.

I have an azure storage account, a client would like to get data from that storage account. They would like to use azure data factory to do that.

My initial thought was they would create an managed ID in their tenant, they would give me the id details and I could then grant that account the correct read permissions on the storage account. However further reading has said this isn't possible.

What would be the best approach to accomplish the above

Azure Data Factory
Azure Data Factory
An Azure service for ingesting, preparing, and transforming data at scale.
11,624 questions
Microsoft Security Microsoft Entra Microsoft Entra ID
{count} votes

1 answer

Sort by: Most helpful
  1. Nandan Hegde 36,146 Reputation points MVP Volunteer Moderator
    2024-01-04T19:34:42.57+00:00

    Hey, in order to use managed identity authentication both the components needs to be in the same tenant. For accessing blob storage from adf present in diff tenant, the choice would be to use service principal authentication (app within the blob tenant), else sas authentication and worst case scenario access key authentication


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.