This article has not been completed yet. However, it may already contain helpful Information and therefore it has been published at this stage.
Instructions via GUI:
Instructions via PowerShell:
$sp = New-AzADServicePrincipal -DisplayName "it-infra-arc-sp2" -Role "Azure Connected Machine Onboarding"
$sp
$sp = New-AzADServicePrincipal -DisplayName "it-infra-arc-sp2" -Role "Azure Connected Machine Onboarding" -StartDate (Get-Date) -EndDate ((Get-Date).AddMonths(1))
$sp.PasswordCredentials.SecretText