Application vs. Service Principal

ApplicationService Principal
API PermissionsIdentity
Secrets / CertificatesRBAC
Resources
Application: What I want to do
Service Principal: What I really can do

Application API Permissions needs admin consent!