How to create multi-tenant enabled managed identity on Azure

Narsimha Vangari (Capgemini America Inc) 0 Reputation points Microsoft Vendor
2024-07-05T19:50:38.21+00:00

Hi All,

I need to access a source Azure Data Lake Storage account using Managed Identity and extract the data to our data platform. The source Data Lake is in a different tenant than my Managed Identity and ETL pipeline. I'm facing challenges accessing the source Data Lake on Tenant A through an ADF pipeline or Databricks notebook using the Managed Identity from Tenant B. Could someone provide a solution for this situation?

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,698 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Gulnaz Mushtaq 410 Reputation points MVP
    2024-07-05T20:25:49.8166667+00:00

    Hi. Narsimha Vangari

    You can set up an Azure Data Factory (ADF) in your target tenant (Tenant B) within a managed virtual network (vNet). If you’re using Synapse Pipelines, create the Synapse Workspace in a managed vNet. Then within the vNet, create an Azure-managed integration runtime. This integration runtime will allow communication between your ADF or Synapse pipelines and the source ADLS account.

    To access the source and target storage accounts, create managed private endpoints for each storage account. These private endpoints will bypass the public network and connect securely within the vNet. You won’t need to whitelist any IP addresses.

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.