Is there any SDK through which I can update passwords of Microsoft Service Accounts (Non-People Accounts)? What kind of permissions would it require?

Question

I get the option to 'Reset Password' in the AAD portal. I was wondering if there is an SDK through which I can set up the password reset dynamically without having the need to interfere.
Any information is appreciated.

Answer 1

Sure, you can use the Graph API: https://learn.microsoft.com/en-us/graph/api/authenticationmethod-resetpassword?view=graph-rest-1.0&tabs=http

If you mean resetting the credentials on a service principal object, that's handled via the following: https://learn.microsoft.com/en-us/graph/api/serviceprincipal-addpassword?view=graph-rest-1.0&tabs=http

Though for service principals you should be using key credentials, now passwords.

Answer 2

Hi @Sachin Kumar

You can reset a user's password by updating their password profile. Before doing this, the calling app must be assigned the User.ReadWrite.All application permission and at least the User Administrator Azure AD role.

Refer to the sample graph C# SDK code:

using Microsoft.Graph;
using Azure.Identity;
using Microsoft.Graph.Models;


var scopes = new[] { "https://graph.microsoft.com/.default" };

var tenantId = "{tenant id}";

// Values from app registration
var clientId = "{client id}";
var clientSecret = "{client secret}";

// using Azure.Identity;
var options = new TokenCredentialOptions
{
    AuthorityHost = AzureAuthorityHosts.AzurePublicCloud
};

// https://learn.microsoft.com/dotnet/api/azure.identity.clientsecretcredential
var clientSecretCredential = new ClientSecretCredential(
    tenantId, clientId, clientSecret, options);

var graphClient = new GraphServiceClient(clientSecretCredential, scopes);


var requestBody = new User
{
    PasswordProfile = new PasswordProfile
    {
        ForceChangePasswordNextSignIn = false,
        Password = "xxxxxxxxxxxxx",
    },
};

await graphClient.Users["{user id}"].PatchAsync(requestBody);

Note that this code is only applicable to versions above Microsoft Graph SDK 5.0.

Hope this helps.

If the reply is helpful, please click Accept Answer and kindly upvote it. If you have additional questions about this answer, please click Comment.