In a nutshell, the request should include x-ms-authorization-auxiliary header with tokens to access the external tenant which manages the subscription where the external vnet resides
For now, vnet peering is the only service feature requiring cross tenant support, though potentially we might have more coming up say cross tenant image sharing, but we don't know yet.
//CC: @anavinahar
this is done
Most helpful comment
this is done