msGraph application: addKey returns with insufficient privileges

Question

This is related to https://learn.microsoft.com/en-us/graph/api/application-addkey?view=graph-rest-1.0&tabs=http

I have a valid certificate created, access token is via client credential based on https://learn.microsoft.com/en-us/azure/active-directory/develop/certificate-credentials

the error I got after calling addKey endpoint:

{
error: {
code: 'Authorization_RequestDenied',
message: 'Insufficient privileges to complete the operation.',
innerError:

{ date: '2023-07-06T03:07:29', 'request-id': 'df9d9173-79ae-43cd-be16-22f9502f784e', 'client-request-id': 'df9d9173-79ae-43cd-be16-22f9502f784e' }

}
}

Based on what the page says: An application does not need any specific permission to roll its own keys. I have no ideas why I am getting this insufficient privileges issue. Any helps would be greatly appreciated.

Answer 1

Make sure that you have granted the following API permissions:

Also, try disconnecting from Graph and reconnecting to the API from the terminal.

---

If this is helpful please accept answer.

Answer 2

I I

I am trying to upload a new certificate to my own account where app is registered, based on the words highlighted in purple, I should not need any permission to do it, unless I misunderstood.

The application permissions are needed when uploading certificate to the account where my app is installed which is not my case. again i would be wrong.

Please correct me if any mistakes. Thanks

Answer 3

Any ideas anyone?

All helps would be greatly appreciated