What’s the Difference Between Microsoft Entra ID Application Object and Service Principal Permissions?