DelegatedAdmin

The deployment must be initiated from a delegated administrator account for the specified service principal.