Hello everyone.
When trying to create a private endpoint for a storage account (which is in a different tenant and subscription) we received this error:
Operation name: Create or update an private endpoint.
Error code: GatewayAuthenticationFailed
Message: Gateway authentication failed for 'Microsoft.Network'. Diagnostic information: timestamp '20191118T163815Z', tracking id 'b43f042c-b6c1-4611-ac5c-65e1ff4b7db1', request correlation id 'b43f042c-b6c1-4611-ac5c-65e1ff4b7db1'.
According to this documentation:
https://docs.microsoft.com/en-us/azure/private-link/private-link-faq
Can Private Endpoint connect to Private Link service across Azure Active Directory Tenants?
Yes. Private endpoints can connect to Private Link services orAzure PaaS across AD tenants.
Unfortunately the existing documentation in https://docs.microsoft.com/en-us/azure/private-link/create-private-endpoint-storage-portal or in https://docs.microsoft.com/en-us/azure/private-link/create-private-endpoint-powershell describes how to create a private endpoint for an Azure Storage Account or for an Azure SQL Database Server respectively BUT in the same tenant and NOT when the Azure PaaS service is in another tenant.
