Blog posts tagged with: ActiveDirectory
Microsoft Graph: to change user passwords, an app can't use API permissions instead just needs User Administrator role
by Patrick Lee on 25 Aug 2022 in categories tech with tags Azure ActiveDirectory MicrosoftGraph ADB2C
User Administrator (or similar) role is needed for a registered app to change a user's passwords within Microsoft Graph.
A hole in Azure Active Directory: Microsoft ought to list the roles a registered application has
by Patrick Lee on 25 Aug 2022 in categories tech with tags Azure ActiveDirectory
It is very hard to find out what roles an app has been granted. When you add a role, document this within the notes section of the app's blade in the Azure portal. Microsoft ought to fix this.