Graph API and extensionAttribute

Question

Hello, I am attempting to modify extensionAttribute5 on an account in Entra ID that was synchronized from our on-prem environment via AD Connect. Currently AD Connect is not configured to sync extensionAttribute's, I am testing something with a custom app (SCIM) and wanted to temporarily update this content on a test account to validate before going this far.

Anyway, I am using the below PowerShell commands to connect via Graph and populate the extensionAttribute5 with a custom string. The commands all seem to complete successfully without error, but the attribute is never updated. Any ideas?

Connect-MgGraph -Scopes "User.ReadWrite.All"
# Get the user
$user = Get-MgUser -UserId "******@domain.com"
$userId = $user.Id
# Define the attributes as a hash table (dictionary)
$Attributes = @{
    "onPremisesExtensionAttributes" = @{
        "extensionAttribute5" = "Custom-String"
    }
}
# Update the user with the hash table (no need to convert to JSON explicitly)
Update-MgUser -UserId $userId -BodyParameter $Attributes

Answer 1

Hi @AdamTyler-3590 , according to this document, what you're doing may not be supported: "It is not supported to sync attribute values from Microsoft Entra Connect to extension attributes that are not created by Microsoft Entra Connect. Doing so may produce performance issues and unexpected results. Only extension attributes that are created as shown in the above are supported for synchronization."

Please review that document and let me know if you have any questions.

If this answer helps you please mark "Accept Answer" so other users can reference it.

Thank you,

James