A cloud-based identity and access management service for securing user authentication and resource access
You can add a service principal at the level of management groups and all subscriptions in that management group will inherit the service principal.
https://learn.microsoft.com/en-us/azure/governance/management-groups/overview
Hope this helps.