Cannot delete user in Azure B2C using Graph API

Question

We are attempting to delete a user within Azure B2C by using the Graph API, but have had no luck up to this point. Documentation here suggests that it is possible: https://msdn.microsoft.com/Library/Azure/Ad/Graph/api/users-operations#DeleteUser

We currently have no issues when it comes to creating/updating users, but when attempting a delete operation we get the following error:

Authorization_RequestDenied - Insufficient privileges to complete the operation.

I'm aware there are limitations to using the Graph API with B2C, but the documentation out there suggests this should not be one of them.

Sa Yang · Accepted Answer · 2018-02-27 05:43:21Z

3

If you want to have enough privileges to Delete Users, you need to assign Company Administrators Role to your Service principal. You can refer to this document to do that.

Use AAD Powershell to Connect AAD:

Connect-AzureAD

Get the Role of Company Administrator:

$role = Get-AzureADDirectoryRole | Where-Object {$_.displayName -eq 'Company Administrator'}

Assign the role to your SP:

Add-AzureADDirectoryRoleMember -ObjectId $role.ObjectId -RefObjectId $yoursp.ObjectId

Try to Get a new token and use it in the head to Delete the user again. Here is my result:

edited Feb 27, 2018 at 5:43

answered Feb 27, 2018 at 5:24

Sa Yang

9,4042 gold badges24 silver badges41 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

juunas Over a year ago

Note that Company Admin is basically the highest role available. I'd try adding more privileges for the app from the portal first. Then if none of those work, this is of course an option.

bmla Over a year ago

@juunas any suggestions on which scopes/privileges should be added in order to delete a user?

Collectives™ on Stack Overflow

Cannot delete user in Azure B2C using Graph API

1 Answer 1

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related