Credentials are tied to the service principal of the user

It’s straightforward for cloud services