Hello Soumen Nandy,
A 403 (Forbidden) error during user creation in Microsoft Entra ID indicates that the request was blocked due to insufficient privileges on the account performing the action. Entra ID allows only accounts with specific administrative roles to create or manage users.
Common roles that allow user creation include:
- User Administrator
- Global Administrator
- Privileged Role Administrator
If a user without these roles attempts to create users (via the Azure portal, PowerShell, CLI, or Microsoft Graph), the request is denied and results in a 403 error.
In this case, once the required admin role was assigned to the account, the permissions were updated and the user creation operation worked as expected. This confirms that the issue was permission-related rather than a service or configuration problem.
If everything is functioning correctly now, this can be treated as resolved.
If this answers your query, do click Accept Answer and Yes for was this answer helpful, which may help members with similar questions.