You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
description: Describes how to publish and deliver events across tenants using an Azure Event Grid topic with a user-assigned identity.
4
4
ms.topic: how-to
5
5
ms.custom: devx-track-azurecli, ignite-2024
6
-
ms.date: 11/18/2024
6
+
ms.date: 04/29/2025
7
7
# Customer intent: As a developer, I want to know how to delivery events using managed identity to a destination in another tenant.
8
8
---
9
9
10
10
# Cross-tenant event delivery using a managed identity
11
11
This article provides information on delivery of events where Azure Event Grid basic resources like topics, domains, system topics, and partner topics are in one tenant and the Azure destination resource is in another tenant.
12
12
13
+
## Supported destinations and tiers
14
+
The following table provides you with the information on whether the cross-tenant delivery to a supported destination is available in a tier (basic or standard) and is generally available (GA) or in public preview.
15
+
16
+
17
+
| Destination | Basic tier | Standard tier (Namespaces) |
| Event Hubs | General available | Public preview |
20
+
| Service Bus (topics) | General available | NA |
21
+
| Service Bus (queues) | General available | NA |
22
+
| Storage queues | General available | NA |
23
+
| Webhooks | Public preview | Public preview |
24
+
| Namespace topics | Public preview | NA |
25
+
| Blob Storage (Dead Letter Storage) | General available | Public preview |
26
+
13
27
The following sections show you how to implement a sample scenario where an Azure Event Grid topic with a user-assigned identity as a federated credential delivers events to an Azure Storage Queue destination hosted in another tenant. Here are the high-level steps:
14
28
15
29
1. Create an Azure Event Grid topic with a user-assigned managed identity in Tenant A.
16
30
1. Create a multitenant app with a federated client credential.
17
31
1. Create an Azure Storage Queue destination in Tenant B.
18
32
1. While creating an event subscription to the topic, enable cross-tenant delivery and configure an endpoint.
19
33
20
-
> [!NOTE]
21
-
> - This feature is currently in preview.
22
-
> - Cross-tenant delivery is currently available for the following endpoints: Service Bus topics and queues, Event Hubs, and Storage queues.
23
34
24
35
## Create a topic with a user-assigned identity (Tenant A)
25
36
Create a user-assigned identity by following instructions in the [Manage user-assigned managed identities](/entra/identity/managed-identities-azure-resources/how-manage-user-assigned-managed-identities) article. Then, enable a user-assigned managed identity while creating a topic or updating an existing topic by using steps in the following procedure.
0 commit comments