Service principal can also be created using PAC CLI pac admin create-service-principal command. It sets up right permissions on service principal including call to /providers/Microsoft.BusinessAppPlatform/adminApplications
pac admin create-service-principal
/providers/Microsoft.BusinessAppPlatform/adminApplications