Can create application registrations independent of the 'Users can register applications' setting and update applications they own.
Documented resource actions
3 documented actions
These are Microsoft's documented resource actions, separate from Graph OAuth permissions and tenant assignments. Descriptions are shown as supplied in the reference.
Action
Description
microsoft.directory/applications/createAsOwner
Create all types of applications, and creator is added as the first owner