Hi,

we have a setup with 2 different Azure tenants. In tenant A we have a storage account that we want to connect as an external location to a databricks workspace in the tenant B. For that we have established a private endpoint from the storage account to the VNet in the tenant B. The databricks workspace is VNet-integration enabled into the same VNet as the private endpoint.

Our issue that we are not able to set up the correct authentication from tenant B to tenant A to access the storage account via an external location in Databricks.

We cannot use SAS and do not want to take the legacy route using a mount function. We would like to somehow do this by using a service principal (ideally user managed identity or/and a multi-tenant app registration)

Thanks a lot for your help!

Petr Sindelar