I also have an external location that is a ADLS v2 however from databricks I only want to grant read access to the managed identity. I want to use file arrival trigger but want to have option of using more than 50 such triggers. 
Is it possible to only grant Storage Blob Data Reader and EventGrid EventSubscription Contributor
to enable file events for the external locations?