Get-MsolPasswordPolicy : Access Denied. You do not have permissions to call this cmdlet.

Question

Hi Team,

I need set Azure AD B2C user password policy validityPeriod. While I am try to get password policy details.

Get-MsolPasswordPolicy : Access Denied. You do not have permissions to call this cmdlet.
At line:1 char:2
+  Get-MsolPasswordPolicy
+  ~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : OperationStopped: (:) [Get-MsolPasswordPolicy], MicrosoftOnlineException
    + FullyQualifiedErrorId : Microsoft.Online.Administration.Automation.AccessDeniedException,Microsoft.Online.Administration.Automation.GetPasswordPolicy

Thanks

Answer 1

What role do you have?

Does it work with the Global ADmin role?

How about with Graph SDK PS?

https://learn.microsoft.com/en-us/powershell/module/microsoft.graph.identity.directorymanagement/get-mgdomain?view=graph-powershell-1.0&preserve-view=true

via the GUI:

https://learn.microsoft.com/en-us/azure/active-directory-b2c/password-complexity?pivots=b2c-user-flow

Answer 2

You have to create a local account (with Global Administrator role) in the Azure B2C Tenant you're trying to run this command for. Then Connect-MsolService and login with the new account you created.