You can execute it also on your computer, and when an individual runs it, it really should not use a service principal, as those are intended for IAM of automated systems, not people.

I run terraform against my Azure sandbox from my computer with nothing more than azure CLI credentials that were stored after I logged in with az.