https://community.databricks.com/t5/administration-architecture/can-we-create-an-external-location-from-a-different-tenant-in/m-p/110563#M3022 <P>Thanks for the response&nbsp;<a href="https://community.databricks.com/t5/user/viewprofilepage/user-id/106294">@Alberto_Umana</a>&nbsp;.</P><P>Looks like the IDs are all provided correctly.&nbsp; Here is the config -</P><DIV>Tenant A&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Tenant B</DIV><DIV>Databricks is hosted here&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</DIV><DIV><SPAN>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Created Resource group RGB&nbsp;</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Created Storage account SA1 in resource group RGB</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Created Access connector AC1 with subscription B, resource&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; group RGB</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Created Managed Identity MI1 with subscription B, resource&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; group RGB</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;MI1 is given storage blob data contributor for Storage account SA1</SPAN></DIV><DIV>&nbsp;</DIV><DIV>Adding Databricks credential with</DIV><DIV>Access connector id of AC1 and</DIV><DIV>Managed Identity id of MI1</DIV><DIV>fails.</DIV><DIV>&nbsp;</DIV><DIV>Is there anything missing with this.</DIV><DIV>What additional tenant details are to be provided while creating Databricks credential</DIV> Wed, 19 Feb 2025 07:10:08 GMT CVveeLT 2025-02-19T07:10:08Z https://community.databricks.com/t5/administration-architecture/can-we-create-an-external-location-from-a-different-tenant-in/m-p/110463#M3013 <P>We are looking to add an external location which points to a storage account in another Azure tenant. Is this possible? Could you point to any documentation around this.</P><P>Currently, when we try to add a new credential providing a DBX access connector and managed identity from a second tenant, it fails with the below error -&nbsp;</P><P><SPAN>Azure Managed Identity Credential with Access Connector Id /subscriptions/9e3f0e12-a02f-4ef3-b8c5-4b3571fb80b8/resourceGroups/BigDataRG1/providers/Microsoft.Databricks/accessConnectors/veena-new-dbx-eastus and Managed Identity ID /subscriptions/9e3f0e12-a02f-4ef3-b8c5-4b3571fb80b8/resourcegroups/BigDataRG1/providers/Microsoft.ManagedIdentity/userAssignedIdentities/veena-dbx-mi for Account Id: 53cd939d-b873-4ad3-a4cf-e4d95bacae68 could not be found.</SPAN></P> Tue, 18 Feb 2025 09:31:01 GMT https://community.databricks.com/t5/administration-architecture/can-we-create-an-external-location-from-a-different-tenant-in/m-p/110463#M3013 CVveeLT 2025-02-18T09:31:01Z https://community.databricks.com/t5/administration-architecture/can-we-create-an-external-location-from-a-different-tenant-in/m-p/110473#M3016 <P>Hello&nbsp;<a href="https://community.databricks.com/t5/user/viewprofilepage/user-id/149660">@CVveeLT</a>,</P> <P>Yes, it is possible to add an external location pointing to a storage account in another Azure tenant.&nbsp;</P> <P>From documentation:&nbsp;</P> <UL> <LI><STRONG>Subscription</STRONG>: This is the Azure subscription that the access connector will be created in. The default is the Azure subscription you are currently using. It can be any subscription in the tenant.&nbsp;<A href="https://learn.microsoft.com/en-us/azure/databricks/data-governance/unity-catalog/azure-managed-identities" target="_blank">https://learn.microsoft.com/en-us/azure/databricks/data-governance/unity-catalog/azure-managed-identities</A></LI> </UL> <P>&nbsp;</P> <UL> <LI><SPAN>Double-check if the Managed Identity and Access Connector are correctly set up in the second tenant.&nbsp;</SPAN></LI> <LI><SPAN>Ensure the Managed Identity is granted the appropriate role ("Storage Blob Data Contributor") on the desired storage account and container.</SPAN></LI> <LI><SPAN>Verify that the Managed Identity, Access Connector IDs, and the tenant details are correctly specified within your Databricks Unity Catalog configuration</SPAN></LI> </UL> <P>&nbsp;</P> Tue, 18 Feb 2025 12:33:25 GMT https://community.databricks.com/t5/administration-architecture/can-we-create-an-external-location-from-a-different-tenant-in/m-p/110473#M3016 Alberto_Umana 2025-02-18T12:33:25Z https://community.databricks.com/t5/administration-architecture/can-we-create-an-external-location-from-a-different-tenant-in/m-p/110563#M3022 <P>Thanks for the response&nbsp;<a href="https://community.databricks.com/t5/user/viewprofilepage/user-id/106294">@Alberto_Umana</a>&nbsp;.</P><P>Looks like the IDs are all provided correctly.&nbsp; Here is the config -</P><DIV>Tenant A&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Tenant B</DIV><DIV>Databricks is hosted here&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</DIV><DIV><SPAN>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Created Resource group RGB&nbsp;</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Created Storage account SA1 in resource group RGB</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Created Access connector AC1 with subscription B, resource&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; group RGB</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Created Managed Identity MI1 with subscription B, resource&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; group RGB</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;MI1 is given storage blob data contributor for Storage account SA1</SPAN></DIV><DIV>&nbsp;</DIV><DIV>Adding Databricks credential with</DIV><DIV>Access connector id of AC1 and</DIV><DIV>Managed Identity id of MI1</DIV><DIV>fails.</DIV><DIV>&nbsp;</DIV><DIV>Is there anything missing with this.</DIV><DIV>What additional tenant details are to be provided while creating Databricks credential</DIV> Wed, 19 Feb 2025 07:10:08 GMT https://community.databricks.com/t5/administration-architecture/can-we-create-an-external-location-from-a-different-tenant-in/m-p/110563#M3022 CVveeLT 2025-02-19T07:10:08Z