You must have sufficient permissions to create an Azure Active Directory application and assign a role to the service principal.
A service principal is a security identity (like a username and password or certificate) with a specific role and tightly controlled permissions that user-created applications, services, and automation tools need to access specific Azure resources.
To enable the node failure recovery and scale out/in features, you must create an Azure Active Directory application and service principal.
- Go to the Azure Documentation.
- On the Get Started tab, under Command-line tools, click Azure CLI or Azure PowerShell.
- In the left navigation menu, expand the Sign in drop-down menu and click Create a service principal.
- Follow the procedures.