The error message for subscriptions in critical state shows "The following service principal is used with this subscription:XXXXXXXX"
We observe the error message and critical state for the subscription because it is mapped to a different Service Principal than the one linked to the enrollment.
When a subscription belongs to an enrollment, we identify the Service Principal linked with that enrollment.
If this Service Principal is healthy, it takes precedence over the one linked directly to the subscription.
As a result, the Service Principal tied to the enrollment will be used for asset collection under the subscription.
Once the subscriptions are mapped to the Service Principal linked to the enrollment, their status should reflect as healthy.