we deploy resources in our Azure tenant through Jenkins which uses terraform to provision infra resources. and we use service principal for authentication and infra provisioning which are in same tenant. in our infra deployment we also create VNET peering with the new Vnet which get deployed and our central VNET which has all the infra resources like monitoring and logging platform. now we have a use case where by using the same Jenkins and terraform scripts we want to provision resources on different tenant. this can be done by using the service principal of remote tenant. but now issue is service principal of TenantB
do not have rights to create network resources in TenantA
. to make this happen service principal of TenantB
should have access on Vnet in TenantA
. i am looking for documentation or guidance how we can give access to service principal of TenantB
in our TenantA
?
0 Replies