Service Principals API Access

Hi guys,

quick question:

I am allowing Service Principals to access PowerBI for managing and publishing my reports. I created an ADD security group and added this security group to Power BI.  According to the yellow marked text, the Service principals are getting access even to tenant-level features. This would result into enormous access to almost anything ? I know that afterwards I restrict the access based on the workspace (i.e. by applying the corresponding access rights) but on tenant level the service principals are still able to perform almost everything ?