Create draft in system.post https://{tenanturl}/config/v1.0/profilesEntitlements required: manageAppAccessAdmin (Manage application lifecycle)