Edit or disable SSPR administrator policy

Question

Dear all,

Im trying to disable or edit the SSPR administrator policy cause it's to open for our environment. Any tips are welcome for where i'm making a error.

When i try to run the commands given in the how to by microsft it says that i have insufficient user rights.

Below are the user permissions i have given the api:

AccessReview.ReadWrite.All
AccessReview.ReadWrite.Membership
Group.Read.All
openid
profile
User.Read
email
UserAuthenticationMethod.ReadWrite.All

Commands i've run to make the connection with graph. On the last line i get the insufficient permissions error.

connect-AzureAD
Install-Module Microsoft.Graph.Identity.SignIns
Connect-MgGraph
Update-MgPolicyAuthorizationPolicy -AllowedToUseSspr:$true|$false

Answer 1

Hello @Robbin van der Want

Thank you for reaching out. I would request you to please provide "Policy.ReadWrite.Authorization" permission to user executing this command. This is documented in the equivalent Graph API article: Update authorizationPolicy.

I hope this helps to resolve your query. Please "Accept the answer" if the information helped you. This will help us and others in the community as well.