I’m trying to automate onboarding of new users by generating and updating their password for their first login.
I’m generating a temporary password for a user and need to update the user on Entra (Azure AD), I’m using the “API Request (Beta)” action event on the Azure AD app. The endpoint I’m using is documented here in microsoft’s documentation.
The request is correctly formed and the account I’m using has global administrator right on Entra.
The body is the following :
{
"passwordProfile": {
"forceChangePasswordNextSignIn": true,
"password": "{{_GEN_1740140375457__randomString}}"
}
}Upon testing my request I get the following response :
{"error":{"code":"Authorization_RequestDenied","message":"Insufficient privileges to complete the operation.","innerError":{"date":"2025-02-21T14:32:55","request-id":"bd753177-9a2a-4b1a-86cf-b1b068ad1b4d","client-request-id":"bd753177-9a2a-4b1a-86cf-b1b068ad1b4d"}}}The Microsoft documentation does state that the `User-PasswordProfile.ReadWrite.All` permission is required to perform this action but when checking the permissions that the Zapier Azure AD Enterprise Application has on entra this one is not there.
Is there a way to request this permission from Zapier ? Could this endpoint be supported natively ? Is there an easier way to do this that I’m missing ?
