Update microsoft-tunnel-conditional-access.md

Requesting an update to the doc as the Application Administrator role does not allow users to run New-AzureADServicePrincipal:

new-azureadserviceprincipal : Error occurred while executing NewServicePrincipal
Code: Authorization_RequestDenied
Message: Insufficient privileges to complete the operation.

I could only execute this with a Global Administrator.

+ Correcting all mentions of "service principle" to "service principal"

Author: franciscopgomes

memdocs/intune/protect/microsoft-tunnel-conditional-access.md

@@ -39,14 +39,14 @@ Before you can configure Conditional Access policies for the tunnel, you must en
 
 2. Download the PowerShell script named **mst-CA-readiness.ps1** from aka.ms/mst-ca-provisioning.
 
-3. Using credentials that have the Azure Role permissions [equivalent to **Application Administrator**](/azure/active-directory/users-groups-roles/directory-assign-admin-roles#application-administrator-permissions), run the script from any location in your environment, to provision your tenant.
+3. Using credentials that have the Azure Role permissions [equivalent to **Global Administrator**](/azure/active-directory/roles/permissions-reference#global-administrator), run the script from any location in your environment, to provision your tenant.
 
-   The script modifies your tenant by creating a service principle with the following details:
+   The script modifies your tenant by creating a service principal with the following details:
 
    - App ID: 3678c9e9-9681-447a-974d-d19f668fcd88
    - Name: Microsoft Tunnel Gateway
 
-   The addition of this service principle is required so you can select the tunnel cloud app while configuring Conditional Access policies. It's also possible to use Graph to add the service principle information to your tenant.
+   The addition of this service principal is required so you can select the tunnel cloud app while configuring Conditional Access policies. It's also possible to use Graph to add the service principal information to your tenant.
 
 4. After the script completes, you can use your normal process to create Conditional Access policies.