Private Link Resource - Storage Account in Another Tenant

[ghost]

When we create private endpoint for storage account, does it support a storage account from a subscription in different AAD tenant?

[Enter feedback here]

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: b006a616-2f2f-8ecf-8b80-fd0a3cc62090
• Version Independent ID: 92c54dc6-8ddf-b1f7-4a58-d61b8cd7fe25
• Content: What is an Azure Private Endpoint?
• Content Source: articles/private-link/private-endpoint-overview.md
• Service: private-link
• GitHub Login: @malopMSFT
• Microsoft Alias: allensu

[SaiKishor-MSFT]

Thanks for the feedback! We are currently investigating and will update you shortly.

[SaiKishor-MSFT]

Yes. Private endpoints can connect to Private Link services or to an Azure PaaS across Azure Active Directory tenants. Private endpoints that connect across tenants require a manual request approval. Please let me know if you have any further questions. Thank you!

[ghost]

@SaiKishor-MSFT That's a great information. I'm very excited!
So in tenant A, I create a private endpoint for storage account type of resource.
and I want to point to a storage account account resource in tenant B
what I should input in the "resource id or alias" field?
does it accept resource id from tenant B?

Thank you so much!

[SaiKishor-MSFT]

@RonnieQuan Yes you should input the resource ID of the storage account and use Manual request. Then approved by the Storage owner using Private Link Center or Storage resource manage on Private Endpoint Connections section. Find more details here in document.

Please also find the Powershell command here in document. Hope this helps.

[ghost]

Looks perfect, I have tested and put the test result in
https://cloudjourney.medium.com/azure-private-endpoint-across-aad-tenant-f5fa86abb948

[SaiKishor-MSFT]

@RonnieQuan Great article! Thanks for sharing.
We will now proceed to close this thread. If there are further questions regarding this matter, please tag me in your reply. We will gladly continue the discussion and we will reopen the issue. Thank you!