In Telefonica, we have Power Apps in a different tenant than Azure.
There is a strong limitation in the architecture of Microsoft, due to Microsoft does not have a multi-tenant solution to be able to have a secure connection between Power Apps and the Blob Storage of Azure.
The only secure solution that we have been able to implement is not supported by Microsoft. This solution consists in setting up the IP addresses included in the Azure Connectors Service Tags of the region where we have deployed our Power Platform environment, in the Access List of the Storage Account in Azure.
Incredibly, for this solution to work properly, we also had to set up our Power Platform environment in a different region than the Azure environment.
Microsoft, will you work to solve these limitations?