Understanding Security and Access Control for Serverless Compute in Azure Databricks
How does Databricks serverless compute access my resources using a system-assigned identity when, according to documentation, serverless compute is not in my subscription?
According to the Microsoft Identity Manager, the security boundary is my tenant, and I believe Azure Databricks serverless compute operates outside of my tenant.
Could you explain in technical detail how Azure Databricks serverless compute manages to access my resources? Also, if I share the Resource ID of the Access Connector (using a system-assigned identity) for Azure Databricks, can it be used by other organizations' Databricks environments to access my storage?