This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(124.80000000000001, 56.00000000000001%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKG%3C/text%3E%3C/svg%3E)
Hi Team,
I am looking for a way to enable "Self-service password reset" enabled to all users and Password reset | Authentication methods to "2" in AzureAD via powershell/graph api/azure cli
@Krupa Gundraju (Larsen & Toubro Infotech Limit)
I just wanted to check in and see if you had any other questions or if you were able to resolve this issue?
There's no Graph API endpoint for that operation currently, nor any PowerShell cmdlet for that matter.
@Vasil Michev So as of now don't we have any automated way using power shell/Azure CLI/REST API, Is this a manual activity from portal?
Can't we use below API? if we can, then Is it possible to add graph API permissions to a service account?
PATCH https://graph.microsoft.com/beta/policies/authorizationPolicy/authorizationPolicy
{
"allowedToUseSSPR":true
}
You can, but that setting only applies to Admin users :) It's not the same thing. APIs for managing SSPR settings are supposedly coming and should be available under /authentication/methods, eventually.
@Vasil Michev I tried below code but I couldn't see any change in the portal
Install-Module -Name MSOnline
Import-module MSOnline
$passwd = ConvertTo-SecureString 'XXXX' -AsPlainText -Force
$pscredential = New-Object System.Management.Automation.PSCredential('XXXX', $passwd)
Connect-MSOlService -Credential $pscredential
Set-MsolCompanySettings -SelfServePasswordResetEnabled $True -TenantId 'XXXXX'
but as per the doc https://learn.microsoft.com/en-us/powershell/module/msonline/set-msolcompanysettings?view=azureadps-1.0 it should be applied to company-wide
As I said above, this is NOT the same setting. And there is no method currently, be it via API or PowerShell, to change the SSRP settings you have highlighted in the original question.
@Krupa Gundraju (Larsen & Toubro Infotech Limit)
I just wanted to check in and see if you had any other questions or if you were able to resolve this issue?
If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.
----------
Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(262.40000000000003, 30%, 35%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJM%3C/text%3E%3C/svg%3E)
Hello @Vasil Michev ,
Do we have any update on this (May 2023)?
Do we now have the capability to change this setting using Powershell/Azure CLI/REST API?
Thank you.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(227.2, 45%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAP%3C/text%3E%3C/svg%3E)
is there a way to see which group has been used for password reset via graph API? @Vasil Michev
I want to be able to give the link to my users if they are part of that group only, so I need to evaluate this before sending them a link, or redirect them to an admin