Can we create an external location from a different tenant in Azure

[CVveeLT]

We are looking to add an external location which points to a storage account in another Azure tenant. Is this possible? Could you point to any documentation around this.

Currently, when we try to add a new credential providing a DBX access connector and managed identity from a second tenant, it fails with the below error - 

Azure Managed Identity Credential with Access Connector Id /subscriptions/9e3f0e12-a02f-4ef3-b8c5-4b3571fb80b8/resourceGroups/BigDataRG1/providers/Microsoft.Databricks/accessConnectors/veena-new-dbx-eastus and Managed Identity ID /subscriptions/9e3f0e12-a02f-4ef3-b8c5-4b3571fb80b8/resourcegroups/BigDataRG1/providers/Microsoft.ManagedIdentity/userAssignedIdentities/veena-dbx-mi for Account Id: 53cd939d-b873-4ad3-a4cf-e4d95bacae68 could not be found.

[Alberto_Umana]

Hello @CVveeLT,

Yes, it is possible to add an external location pointing to a storage account in another Azure tenant. 

From documentation: 

• Subscription: This is the Azure subscription that the access connector will be created in. The default is the Azure subscription you are currently using. It can be any subscription in the tenant. https://learn.microsoft.com/en-us/azure/databricks/data-governance/unity-catalog/azure-managed-ident...

• Double-check if the Managed Identity and Access Connector are correctly set up in the second tenant. 
• Ensure the Managed Identity is granted the appropriate role ("Storage Blob Data Contributor") on the desired storage account and container.
• Verify that the Managed Identity, Access Connector IDs, and the tenant details are correctly specified within your Databricks Unity Catalog configuration

[CVveeLT]

Thanks for the response @Alberto_Umana .

Looks like the IDs are all provided correctly.  Here is the config -

Tenant A                                                                Tenant B

Databricks is hosted here                                   

                                                                                Created Resource group RGB 

                                                                                Created Storage account SA1 in resource group RGB

                                                                                Created Access connector AC1 with subscription B, resource                                                                                        group RGB

                                                                                Created Managed Identity MI1 with subscription B, resource                                                                                          group RGB

                                                                               MI1 is given storage blob data contributor for Storage account SA1

Adding Databricks credential with

Access connector id of AC1 and

Managed Identity id of MI1

fails.

Is there anything missing with this.

What additional tenant details are to be provided while creating Databricks credential