Update-MGContact: Possible with unattended Access?

Question

Hello Everyone

I am trying to set up a Powershell-Script as a scheduled task that automatically updates Contacts in the Azure Database unattended, without having to add a Password to the Script. I unfortunately receive an Error-Message, despite having the necessary rights for it (im Using an AppOnly Authentication Method for it with a self signed certificate):
]1]1
The error message is "Insufficient Privileges to complete the operation"

Now, someone from this forum already helped me by telling me that "Update-MGContact" is ReadOnly, but is there a way to update a Contact with an Unattended connection?

Thank you for your help.

Kind regards,

Gabe

Answer 1

Hi,

Using Microsoft.Graph scripts with a Service account should be possible. Maybe you did not grant all necesarry permisions to the App Registration account.

More info at:
https://tech.nicolonsky.ch/exploring-the-new-microsoft-graph-powershell-modules/

Hope this helps!

Answer 2

Hi,

I see that you have permissions.
What I found strange is that there are both application and delegated permissions. I would expect only application. Delegated means that you action on behalf of a user which is not the case according to your description.

I would add directory.readwrite.all permision at application level and see if that fix the issue.

Hope this helps!

Answer 3

Hello @Gabe

I would like to recommend you the next official articles, that can help you to review the permissions and account types for Microsoft Graph:

Permissions:
https://learn.microsoft.com/en-us/graph/permissions-reference

Application vs Seivice principals:
https://learn.microsoft.com/en-us/azure/active-directory/develop/app-objects-and-service-principals

Hope this helps with your query,

---------
--If the reply is helpful, please Upvote and Accept as answer--