ADO Service Principal

We usually provide temporary access of 6 hours for user to have the Application Admin role to perform below step on ADO to create the Service Principal required

However, we can also consider creating a custom role with the following permission to create an Application but not manage applications like adding API permissions. (Emily Wen - MSFT)