Not able to remove Application owners using Graph API permission "Application.ReadWrite.All" of type "Delegate"

Question

Answer 1

Hello Rajesh Gudibanda Nagaraja,

Yes, you will be able to delete Application owners using Application.ReadWrite.All delegated API permission but in delegated scenarios with work or school accounts, the signed-in user must be assigned a supported Microsoft Entra role or a custom role with a supported role permission. The following least privileged roles are supported for this operation.

• Hybrid Identity Administrator
• Cloud Application Administrator
• Application Administrator

Hence, you are getting the 403 error.

Only Application.ReadWrite.All delegated API permission isnt sufficient, the user must also have role assigned as stated above.

After assigning the role, you will be able to delete the Application owner successfully.

Reference:Remove application owner - Microsoft Graph v1.0 | Microsoft Learn

If the resolution was helpful, kindly take a moment to click on and click on Yes for was this answer helpful. And, if you have any further query do let us know.