Service Principal with "Cloud Application Administrator" role is not able to create another SP.

I have a Service Principal to which I've granted the following permissions: Owner on a subscription, done via role assignment (az role assignment create) Cloud Application Administrator, done v...