Permission error while using Microsoft Graph Application AddPassword method

Question

I'm attempting to automate password creation using the Microsoft Graph Application AddPassword method and the code sample https://learn.microsoft.com/en-us/graph/api/application-addpassword?view=graph-rest-1.0&tabs=python.

I initialized graph_client with ClientSecretCredential something like this:

Credential = ClientSecretCredential(tenant_id, client_id, and client_secret). Graph_client = GraphServiceClient(credential, scopes).

I think that I have given the appropriate permission. I have added the permissions listed below.

But I'm still getting the 403 (Authorization_RequestDenied) error. Please let me know what extra permissions are required to make it work.

Answer 1

Hi @Murali R ,

Thanks for reaching out to Microsoft!

I tested from my end by consenting to both "Application.ReadWrite.OwnedBy" and "Application.ReadWrite.All" permissions.

When only the "Application.ReadWrite.OwnedBy" permission was consented, an error was encountered. However, consenting to the "Application.ReadWrite.All" permission resulted in a successful response, allowing the password creation process to proceed without issues.

Based on these results, it appears that the "Application.ReadWrite.OwnedBy" permission alone is insufficient for this operation. Consent to the "Application.ReadWrite.All" permission. This will ensure that have the necessary permissions to perform the required operations without encountering authorization errors.

Hope this helps.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Answer 2

Hello Murali R,

Thank you for reaching out to Microsoft Support!

According to the document, permissions Application.ReadWrite.OwnedBy support only update that this Application is the Owner of another Application.

So, you might have 403 because the app you are using is not the Owner, so you need to grant higher permissions Application.ReadWrite.All.

The test results are as follows:

Hope this helps.

If the answer is helpful, please click Accept Answer and kindly upvote it. If you have any further questions about this answer, please click Comment.