Azure Build Pipeline - How to Grant Access to Storage Accounts?

Question

Goal:

Securely get Azure resources by tag from Azure pipeline.

Details:

I have an azure-pipelines.yaml that b