Introduction
...
Using Service Principals
Authentication with a client secret which is similar to a password for a user.
Authentication with a certificate (recommended by Microsoft) : Considered more secure than a client secret, an app can also authenticate with a certificate.
Authorization with RBAC works similar to user accounts, leveraging RBAC (role-based access control).