Application vs. Service Principal

Application	Service Principal
API Permissions	Identity
Secrets / Certificates	RBAC
	Resources
Application: What I want to do
Service Principal: What I really can do

Application API Permissions needs admin consent!