i am fatching for access to change password operation is denied in Asp.net C#

Question

Every Time i am faching same error any suggestion for me how can i solve this error using ASP .NET API.

Answer 1

Hi @Sodvadiya, Suryadeep

If modifying the password for a user in the application-only context, the calling app must be assigned the User.ReadWrite.All application permission and at least the User Administrator Azure AD role.

Sign in to Azure AD as a global administrator>Roles and administrators> find User Administrator >Add assignments> enter your application ID to search and add.

using Azure.Identity;   
using Microsoft.Graph;  
  
  
var scopes = new[] { "https://graph.microsoft.com/.default" };  
  
var tenantId = "{tenant id}";  
  
// Values from app registration  
var clientId = "{client id}";  
var clientSecret = "{client secret}";  
  
// using Azure.Identity;  
var options = new TokenCredentialOptions  
{  
    AuthorityHost = AzureAuthorityHosts.AzurePublicCloud  
};  
  
// https://learn.microsoft.com/dotnet/api/azure.identity.clientsecretcredential  
var clientSecretCredential = new ClientSecretCredential(  
    tenantId, clientId, clientSecret, options);  
  
var graphClient = new GraphServiceClient(clientSecretCredential, scopes);  
  
var user = new User  
{  
      PasswordProfile = new PasswordProfile  
      {  
            ForceChangePasswordNextSignIn = false,  
            Password = "xxxxxxxxxxxxx"  
      }  
};  
  
await graphClient.Users["{user id}"]  
      .Request()  
      .UpdateAsync(user);  

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Hi @Sodvadiya, Suryadeep ,

Thanks for reaching out.

I understand you are trying to update the password using ROPC flow and getting unauthorized error.

To update the password, you need to assign Directory.AccessAsUser.All delegated permissions to your application. This permission needs to provide admin consent to update the password.

Reference: https://learn.microsoft.com/en-us/graph/api/user-changepassword?view=graph-rest-1.0&tabs=http#permissions

Hope this will help.

Thanks,
Shweta

----------------------------------

Please remember to "Accept Answer" if answer helped you.