Modify Sync User Attributes with Microsoft API Graph

Nina Franchaisse 41 Reputation points


I have an Active Directory synchronized on an Azure AD (with Azure AD Connect) and I want to create a script that changes user attributes.
I use API Graph calls and it works for full cloud accounts but not for synchronized ones and returns the error :

“Unable to update the specified properties for on-premises mastered Directory Sync objects or objects currently undergoing migration.”

Do you know if it is possible to modify sync user attributes with API Graph ?

Thanks you

Azure Active Directory
Azure Active Directory
An Azure enterprise identity service that provides single sign-on and multi-factor authentication.
14,691 questions
Microsoft Graph Users API
Microsoft Graph Users API
A Microsoft API that allows you to build compelling app experiences based on users, their relationships with other users and groups, and the resources they access for example their mails, calendars, files, administrative roles, group memberships.
725 questions
0 comments No comments
{count} votes

Accepted answer
  1. Vasil Michev 71,211 Reputation points MVP

    You cannot, the whole idea of using directory synchronization is that changes to object and their attributes are managed centrally in your on-premises AD. Graph API, PowerShell or the admin center UI will not help you here, use the AD tools. Or if you want to manage objects via Graph, create them directly in Azure AD.

    0 comments No comments

0 additional answers

Sort by: Most helpful