Cannot update some systemuser in dataverse via Dataverse .net Client - Email address not approved error message

[Mathieu80]

We're trying to update user information in systemuser table of a Dataverse environmment and we get error message for many users. Some other user are saving fine. We're using Microsoft.PowerPlatform.Dataverse.Client (1.1.12)

I'm updating only 2 fields I don't know if that help: businessunitid and employeeid.

ErrorCode: 0x8009000B Message: Email address can only be approved by an Office 365 Global Administrator or by an Exchange Administrator. For more information, contact your system administrator.

The application modify Dataverse via an App Registration in Azure. Surprisingly when I use my personal account (System Administrator as well) in the environment and use Dataverse web user interface I can update the 2 fields without any error. By the way we do not use Dynamic 365 / Dataverse to send any email in our application.

Anyone got this situation and can help out with this error message and how to avoid that?

[dpoggemann]

Hi @Mathieu80 ,

Are you getting the same errors updating the fields from the form within a model application? 

What I am expecting is that the ones that are failing have setup integration with Exchange Online and Dataverse and the mailboxes are being synced.  Could you check if this is the case?  Overall I would expect you should be changing the email address in Azure Active Directory, not in Dataverse.

I also remember having issues changing the business unit on a user if the manager for that user is in a business unit that is not in the same "lineage".  I am not sure if this is still the case but you may want to check if this is the reason some are failing.  I remember the manager needed to be within the same "business unit hierarchy" for sure.  

This is what I remember failing (but maybe it is not the case anymore):

[LinnZawWin]

@Mathieu80 

It's weird that updating those two fields (businessunitid and employeeid) would trigger the mailbox approval action.

If you are not using Dynamic 365 / Dataverse to send any email in our application anyway, will you be able to remove requirement to approve mailboxes and see if it solves the problem?

[Mathieu80]

Finally it has nothing to do with businessunitid and employeeid. I commented out the lines where it set new values for those 2 fields and fails as well. The code simply loads a systemuser and save the same user in the dataverse without changind any information and it fails. Also tested with my personnal account instead of the application registration and same error.

If we turn off the requirement to approve mailbox is there any chance that emails of any kind will be send to users? 

[LinnZawWin]

It will not send out any email if you have no "Email Server Profile" configured to associate with the Mailboxes.

https://arunpotti.com/2016/07/07/how-to-configure-email-using-server-side-synchronization-in-crm-201...