[Azure related question]: Does anybody know the required steps to be able to login to pulumi with a ServicePrincipal that has the permissions to create new `Application`s which is basically always required if you want to have the service principal creating new `Application`s, e.g. to have an AKS cluster SP or creating a new SP for ACR Push. Contributor and Owner are not enough. I found that note

NOTE: If you’re authenticating using a Service Principal then it must have permissions to both

Read and write all applications

and

Sign in and read user profile

within the Windows Azure Active Directory API.

on the terraform provider docs. Has anybody used

azuread

together with a

ServicePrincipal

authentication and can point me the right way?