Cannot PATCH User With Any Data (Can Do In Graph Explorer) - Office 365 Users - Send an HTTP request

[eliotcole]

Hi, I have tried this with two new applications and with two separate schemaExtension additions.

I will ignore the fact that I cannot add a schema extension via Power Automate, for now, but that very much grates. 😠

Currently, whatever method I try I cannot update a user with any data, either normal fields or schemaExtension data using the Office 365 Users connection action 'Send an HTTP request' to update the user.

It is with a PATCH request to the following endpoint:

https://graph.microsoft.com/v1.0/users/USER_ID_GOES_HERE

The body I am using is the same as the request in the example:

{
  "businessPhones": [
    "+1 425 555 0109"
  ],
  "officeLocation": "18/2111"
}

I have tried this from two separate tenancies with the GlobalAdministrator on both, for both "Member" and "Guest" type users.

The response always come back as "Insufficient privileges to complete the operation" when submitting via the HTTP request.

Does anyone else have any experience with this?

Details for the schemaExtension requests are in the below spoiler:

Spoiler

The normal body JSON is as per the documentation on this and is as follows:

{
  "extensionBlah": {
    "propertyOne": false,
    "propertyTwo": "isText"
  }
}

Additional information on schemaExtensions:

1. I have tried this input using multiple configurations of the JSON, I have tried this using multiple PUT/PATCH combinations, and as you can see above I even tried the new Entra ID connector.
2. I am running the actions as the tenant owner, who is a GlobalAdministrator.
3. The account was made the Owner of each of the new applications created to own the schemaExtension.
4. I have ensured that each application created to own the schemaExtension has the following delegated permissions:
   • Application.ReadWrite.All
   • Directory.AccessAsUser.All
   • Directory.ReadWrite.All
   • Directory.Write.Restricted
   • User-LifeCycleInfo.ReadWrite.All
   • User.ManageIdentities.All
   • User.ReadWrite
   • User.ReadWrite.All
5. I have tried the exact same request in the Graph explorer and it works perfectly from the same account.