‘Resource Group 1’ has user assigned managed identity and active storage accounts. ‘Resource Group 2’ has passive storage accounts. Now, current ARM template has the definitions for the user managed identity and active storage accounts and within the nested deployment, it has definitions for passive storage accounts which are deployed in ‘Resource Group 2’.
Now I want to add role assignments between user assigned managed identities and storage acccounts. Role assignments between user assignment managed identity and active storage accounts which are in the same resource group are deploying fine. But I am unable to deploy role assignments between user assigned managed identity in resource group 1 and passive storage accounts in resource group 2.

I have tried adding cross resource group role assignments within the nested deployment where passive storage accounts are defined but I am getting template validation error that the passive storage account is not defined in the template.

I can not share the ARM template here.