Velero: How can I use azure workload identity with different resource groups for snapshotter and storage

[papanito]

We want to use Azure Managed Identity for creating velero backups: https://github.com/vmware-tanzu/velero-plugin-for-microsoft-azure/blob/main/README.md#option-3-use-azure-ad-workload-identity

Currently our setup is that we have 2 different resource groups - 1 for the storage account and 1 for aks (disk snaphost). Looking trough the documentation, this seems not a supported setup for Azure Managed Identity!?

The main problem I see, is that we only can specify one resource group in ./credentials-velero

Is that correct or is there a ways where we can use Azure Managed Identity for our use case

[papanito]

vmware-tanzu/velero#8595