I am getting this below error while trying to run the logic app

Question

I am getting this below error while trying to run the logic app

Nimantha Deshappriya 21

I deployed reset password logic app from github and I wanted it to be executed whenever a suspicious signing attempt. However, i am getting the below error.

{

"statusCode": 403,  

"headers": {  

    "Transfer-Encoding": "chunked",  

    "Vary": "Accept-Encoding",  

    "Strict-Transport-Security": "max-age=31536000",  

    "request-id": "8cf5eb6d-6b31-47f7-b406-903c1509ac50",  

    "client-request-id": "8cf5eb6d-6b31-47f7-b406-903c1509ac50",  

    "x-ms-ags-diagnostic": "{\"ServerInfo\":{\"DataCenter\":\"Japan East\",\"Slice\":\"E\",\"Ring\":\"5\",\"ScaleUnit\":\"001\",\"RoleInstance\":\"TYO1EPF00001C6F\"}}",  

    "x-ms-resource-unit": "1",  

    "Cache-Control": "no-cache",  

    "Date": "Sun, 06 Nov 2022 05:15:48 GMT",  

    "Content-Type": "application/json",  

    "Content-Length": "266"  

},  

"body": {  

    "error": {  

        "code": "Authorization_RequestDenied",  

        "message": "Insufficient privileges to complete the operation.",  

        "innerError": {  

            "date": "2022-11-06T05:15:49",  

            "request-id": "8cf5eb6d-6b31-47f7-b406-903c1509ac50",  

            "client-request-id": "8cf5eb6d-6b31-47f7-b406-903c1509ac50"  

        }  

    }  

}

}

The following permission has been given to Microsoft Graph API

The following is the logic app from github

https://github.com/Azure/Azure-Sentinel/tree/master/Solutions/Azure%20Active%20Directory/Playbooks/Reset-AADUserPassword

Manu Philip 20,286 Reputation points MVP Volunteer Moderator

2022-11-06T13:14:46.467+00:00

From the error message, it is clear that the Graph API permissions are not sufficient. Can you add the following permission also for the application?
Add a permission > Microsoft Graph > Delegated permissions >

----------

--please don't forget to upvote and Accept as answer if the reply is helpful--
Nimantha Deshappriya 21 Reputation points

2022-11-09T02:34:58.18+00:00

This didn't work unfortunately.
JamesTran-MSFT 36,911 Reputation points Microsoft Employee Moderator

2022-12-09T23:19:24.247+00:00

@Nimantha Deshappriya
I just wanted to check in and see if you had any other questions or if you were able to resolve this issue?

If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.

----------

Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

1 answer

Your answer

Manu Philip 20,286 Reputation points MVP Volunteer Moderator

2022-11-06T13:14:46.467+00:00

From the error message, it is clear that the Graph API permissions are not sufficient. Can you add the following permission also for the application?
Add a permission > Microsoft Graph > Delegated permissions >

----------

--please don't forget to upvote and Accept as answer if the reply is helpful--
Nimantha Deshappriya 21 Reputation points

2022-11-09T02:34:58.18+00:00

This didn't work unfortunately.
JamesTran-MSFT 36,911 Reputation points Microsoft Employee Moderator

2022-12-09T23:19:24.247+00:00

@Nimantha Deshappriya
I just wanted to check in and see if you had any other questions or if you were able to resolve this issue?

If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.

----------

Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

Answer 1

MayankBargali-MSFT 70,941 Moderator

@Nimantha Deshappriya As per the document here your system identity should have Password Administrator permission.

Share via

I am getting this below error while trying to run the logic app

1 answer

Your answer