Share via

Microsoft Graph API - User Update

Inho Kim 41 Reputation points
2020-09-11T10:10:42.787+00:00

Hello. I have a question about the Microsoft Graph API.

When updating user information using Graph API, there is an item to change the password attribute. We judged that the user password can be changed only with the personally issued Oauth token and permission information.

We created a new test account and tested whether it was possible to change the password of the user, and it was concluded that it was possible according to the process above. Is this the policy enforced by Microsoft? Are there any issues with using this API in practice? please answer about my question.

Thank you in advance.

Microsoft Security | Microsoft Entra | Microsoft Entra ID
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Vasil Michev 127K Reputation points MVP Volunteer Moderator
    2020-09-11T11:20:42.91+00:00

    I think you are confusing self-service password reset and password change. For the latter, best use the resetPassword endpoint: https://learn.microsoft.com/en-us/graph/api/passwordauthenticationmethod-resetpassword?view=graph-rest-beta&tabs=http

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.