Update User Password Profile API - Insufficient Privileges Error

Question

Hi,

I'm trying to update User Password Profile using the https://learn.microsoft.com/en-us/graph/api/user-update?view=graph-rest-1.0&tabs=http&source=docs

I've provided the authenticating AD App, with Application type permission for: User.EnableDisableAccount.All, User.ReadWrite.All, Directory.ReadWrite.All.
However, I keep getting Insufficient Privileges permission. Please note, I do use the same authenticating app for User creation too.

Appreciate your help here!

Answer 1

Got the answer. It needed User Administrator role assigned!

Answer 2

Hi @Chowdhury, Urvashi

Yes, the logged in user or application must have the User Administrator role to change another user's password. If you want to change the password of an administrator user, the logged-in user or application must have the Global Administrator role.

Have the same problem here.

Hope this helps.

If the reply is helpful, please click Accept Answer and kindly upvote it. If you have additional questions about this answer, please click Comment.