Microsoft Graph, revoking user's sign in sessions, returns InvalidAuthenticationToken error

Question

I'm attempting to revoke a user's sign in sessions, however I keep receiving a 401 unauthorize error.

Here is my code snippet:

async revokeSignInSessions(targetUser, accessToken) {
    const query = `/users/${targetUser.id}/revokeSignInSessions`;

    await azure.graph.post(query, {
        headers: {
            'Authorization': 'Bearer ' + accessToken
        }
    });

    return 'success'; 
}

I receive the following error:

error: {
	code: 'InvalidAuthenticationToken',
	message: 'Access token is empty.'
}

If I place a debugging stop point, I can see that the access token contains a token value.

The Microsoft Graph API App has been granted the following permissions:

Thank you in advance for your time and attention

Answer 1

Try adding the app to the 'Authentication Administrator" Azure AD role or "Privileged Authentication Administrator" and then try again.

Answer 2

The issue was due to the syntax of the post request. It apparently required a body, even if empty. After including an empty body in the request, I was able to perform the operation successfully.

    await azure.graph.post(query, {}, {
        headers: {
            'Authorization': 'Bearer ' + accessToken
        }
    });