Microsoft Graph : Unable to Update BusinessPhone Value using User.ReadWrite Scope

Question

i'm trying to update the value for "BusinessPhone" using the scope "User.ReadWrite" but i'm receiving the error message " Insufficient privileges to complete the operation". However i'm able to update MobilePhone value. I'm using Microsoft Graph.

Answer 1

I could reproduce your scenario , seems User.ReadWrite permission not enough to update BusinessPhone property . You could add Directory.AccessAsUser.All permission which works after testing :

Directory.AccessAsUser.All need admin consent , you could login with your admin account and click Grant Permissions button as shown in above screenshot .

After that , use your authentication process and get the token , check whether Directory.AccessAsUser.All scope exists in scp claim of access token , you could use online tool to decode token . If exists , try again to update BusinessPhone property with that token .

Please let me know if it helps .