How to implement delegated permissions with a non-interactive environment

Question

I'm implementing an solution that reset users passwords on Azure AD. Per the documentation, this operation requires delegated permissions and can't be done with application permissions. How can I implement this workflow in behalf of an admin account in a secure and automated way?

Answer 1

Do you specifically requite the "reset password" flow? If changing the password is an acceptable alternative, you can use the Update user method, which supports application permissions. See this example: https://learn.microsoft.com/en-us/graph/api/user-update?view=graph-rest-1.0&tabs=http#example-3-update-the-passwordprofile-of-a-user-and-reset-their-password