So, what use would it be in a situation where I have a Docker image that runs as a job using Databricks Compute. Here the Job has "Run As" which is set to a service principal, say "svc1" which is a databricks managed service principal. I believe that this job when trying to access unity catalog tables will apply restrictions based on the permissions of "svc1". 

If there was another "svcazure1" which is a Azure Managed identity, and if I use it as the "Run As", apart from the unity catalog restrictions, what else can this be used for, from the code that's in the Docker. Can this identity access Azure Key Vault if it has access to it? If yes, do you know how this can be achieved in Python?