eciruam's avatar
eciruam
Copper Contributor
Sep 24, 2021
Status:
New

passwordAuthenticationMethod: resetPassword as application without delegation

Currently it is not supported and possible to reset a user password using the GraphAPI as a service principal.
https://docs.microsoft.com/en-us/graph/api/passwordauthenticationmethod-resetpassword?view=graph-rest-beta&tabs=http

 

We have tried according this blog post (add the Helpdesk Administrator role to the service principal)
https://levelup.gitconnected.com/how-to-reset-or-update-user-passwords-with-microsoft-graph-api-in-azure-ad-c6733c3b0ac3
but the response is:

{\"error\":{\"code\":\"BadRequest\",\"message\":\"UserPrincipalName value in token was missing or invalid\"
Which confirms the docs page I guess.

Are there any plans to expand these permissions so it is possible to reset the password programmatically using application permissions? We want to create a daemon app to perform this task.
No CommentsBe the first to comment