Enabling cross-subscription communication for private DNS zones
If the private DNS zones for the Storage Account File Share and the database are deployed in an Azure subscription that is outside of the CDP subscription, to enable the cross-subscription communication, you must configure the role assignment for CDP.
In the subscription of the private DNS zone for the Storage Account Files Share and for the database, you must assign a contributor role to the Azure application that is used for CDP.