CODEWITHSUNDEEP
azureazure-ad-graph-api
S Andrew
S Andrew

Reputation: 7198

How to create a user using azure graph api

I am trying to create a user using azure graph API. For this, I have got the token response as below:

enter image description here

Once I have the token, I have added this as bearer token in Authorization for the below url:

https://graph.microsoft.com/v1.0/users

and posting the below json data:

{
  "accountEnabled": true,
  "displayName": "Andrew",
  "mailNickname": "SanAndrew",
  "userPrincipalName": "[email protected]",
  "passwordProfile" : {
    "forceChangePasswordNextSignIn": true,
    "password": "password"
  }
}

But getting below error:

{
    " error": {
        "code": "Authorization_RequestDenied",
        "message": "Insufficient privileges to complete the operation.",
        "innerError": {
            "request-id": "c06079d2-ff6b-4e5b-b34d-704f16bc312f",
            "date": "2019-06-03T11:20:20"
        }
    }
}

although I have all the permissions as shown below:

enter image description here

Can anyone please suggest what I am doing wrong here.

Upvotes: 0

Views: 108

Answers (1)

juunas
juunas

Reputation: 58723

One possibility for the error is that you are trying to create a user with gmail.com domain. The domain needs to be one of the verified domains in your AAD tenant.

If you want to add a gmail.com user anyway, you need to send an invitation through the invitations endpoint: https://learn.microsoft.com/en-us/graph/api/invitation-post?view=graph-rest-1.0&tabs=cs

Upvotes: 1

Related Questions