I am trying to create a service principal a.k.a. app registrations in Azure that has the required permissions to create and delete resource groups (and proceed to manage the resources of those resource groups after).
When I create a service principal, it only has access to the content of resource group that itself belongs to.
Here is a screenshot of my attempt so far. This is under App registrations: