Reputation: 83
I'm setting up Role-based access control for our Blob storage in Azure.
Integration with AD is already available. However, I want to use a separate account's AD to access the blobs.Is it possible? and if so, how?
This is how it was set up so changes in architecture like remaking an AD or doing subscription changes can't be done.
Upvotes: 3
Views: 224
Reputation: 58723
You can only assign Azure RBAC roles on users and apps in the Azure AD tenant connected to the subscription. If you want to give access to users in another tenant, you'll have to invite them as guests to the tenant connected to the subscription and then add roles to them.
Upvotes: 1