A mis-scoped Agent ID Administrator role in Entra ID allowed users to take ownership of unrelated service principals, ...