The following steps are required to setup an On Demand Migration service principal in your tenant, and assign specific permissions.

Creating the ODM Service Principal
  1. Open PowerShell as administrator.
  2. install the Power Apps module 
    Install-Module Microsoft.PowerApps.Administration.PowerShell -Scope CurrentUser -Force
  3. Create a new application 
    New-PowerAppManagementApp -ApplicationId '4078503c-d803-4056-8ee8-bf93f1b66fc6'
Granting permissions to the ODM Service Principal
  1. Login into Power Platform admin center https://admin.powerplatform.microsoft.com as the tenant Administrator.

  2. Go to Manage> Environments.

  3. Choose an environment for which you want to set accessibility to Dataverse.
  4. Click on the three dots next to the chosen environment and select Settings.

  5. On the Settings page, expand Users + permissions and click Application users.
  6. On the Application Users page, click New App User from the popup. The Create a new app page opens.

  7. Click Add an app. Search for the Quest service principal using ID : 4078503c-d803-4056-8ee8-bf93f1b66fc6 which is the same id that you used to create the application. Click Add to save the service principal Quest On Demand - Migration - Power Apps.

  8. On the Create a new app page select Business unit, and add the suggested business unit.
  9. Edit Security roles and add System Administrator. Then click Create.
  10. On the the Settings > Application Users page, verify that the ODM service principal (the new app user) has been successfully added for the selected environment.