Use Microsoft.Azure.Cdn service principal to grant access to private container?

Hello,   I'm trying several methods to access a private container within a StorageAccount containing multiple containers (all set to private), just to get a hold of the concepts.   In this scenar...