Your SharePoint admin doesn’t allow site owners to create/update ACS principal

Troubleshooting “Your SharePoint tenant admin doesn’t allow site collection admins to create an Azure Access Control (ACS) principal” or “Your SharePoint tenant admin doesn’t allow site collection admins to update app permissions.”
0:55 SharePoint App-Only service principal Demo
2:15 The reason
2:45 Workaround: register App in Azure
3:50 Sites.Selected App Permissions
5:10 MS Graph and REST APIs admin consent
6:15 App/Client Id, Secrets and Certificate
7:55 The last step – permissions to Site

Blog article: https://vladilen.com/sharepoint/your-sharepoint-admin-doesnt-allow-site-owners-to-create-update-acs-principal/
Everything on the subject – Sites.Selected: https://vladilen.com/tag/sites-selected/