[prerequisites] for the az ad sp

[AdimUser]

Is it possible to include the minimum AD privilege required to execute the commands

[yonzhan]

@jiasli for awareness

[jiasli]

Currently, az ad sp still calls AD Graph, which means it uses AD Graph permissions which is hard to be assigned using GUI (#19818).

If you do want to know,

• For delegated permission, it requires Application.ReadWrite.All
• For application permission, it requires Application.ReadWrite.OwnedBy, or Application.ReadWrite.All

We are currently migrating to Microsoft Graph (#12946), and in the future, it will call Create application and Create servicePrincipal API. You can find required permissions in those linked documents.