Graph Endpoints that require administrative roles not working

[Tanddant]

Target SharePoint environment

SharePoint Online

What SharePoint development model, framework, SDK or API is this about?

💥 SharePoint Framework

Developer environment

None

What browser(s) / client(s) have you tested

• 💥 Internet Explorer
• 💥 Microsoft Edge
• 💥 Google Chrome
• 💥 FireFox
• 💥 Safari
• mobile (iOS/iPadOS)
• mobile (Android)
• not applicable
• other (enter in the "Additional environment details" area below)

Additional environment details

SPFx 1.17.2
Chrome Version 119.0.6045.200 (Official Build) (64-bit)

Describe the bug / error

I'm having an interesting issue, when I'm using the MSGraphClientV3 in SPFx the following call fails:

PATCH https://graph.microsoft.com/v1.0/admin/people/profileCardProperties/UserPrincipalName

BODY

{
    "annotations": [
        {
            "displayName": "UPN",
            "localizations": [
                {
                    "displayName": "Test122",
                    "languageTag": "ar-TN"
                }
            ]
        }
    ]
}

I get an 403 Forbidden

Response

{
    "error": {
        "code": "UnknownError",
        "message": "",
        "innerError": {
            "date": "2023-12-04T12:35:12",
            "request-id": "18740317-0dd0-4bd9-abf6-cb28e777c11e",
            "client-request-id": "7b1ef20a-fc9d-64d3-3ed8-c12e27c8a81c"
        }
    }
}

What (with the help of the Graph support team) have narrowed it down to is that if I create a token via. Postman, Graph Explore, or elsewhere, I get a property like this

```JSON
"wids": [
      "62e90394-69f5-4237-9190-012177145e10",
      "b79fbf4d-3ef9-4689-8143-76b194e85509"
],

where as the SPFx token only has a "haswids": "true",

Steps to reproduce

Create SPFx solution, grant the PeopleSettings.ReadWrite.All graph permissions, and follow the docs to get a GraphClientV3

https://learn.microsoft.com/en-us/sharepoint/dev/spfx/use-aad-tutorial#using-msgraphclientv3

Try the request from above, and watch it fail, retry in Graph Explorer to validate your user does indeed have the required permissions.

Expected behavior

The token should grant the same permissions as the Graph Explorer (not same scopes, but same roles)

---

NOTE This is a reopen of an old issue that has more info #9368 - but is still present

[Ashlesha-MSFT]

Hello @Tanddant,
Thank you for bringing this issue to our attention. We will look into it and get back to you shortly.

[Ashlesha-MSFT]

@Tanddant,
I'm encountering a 409 Conflict error when making the PATCH request from the SharePoint workbench as well.
Could you please help identify the root cause or suggest steps to reliably reproduce and resolve this issue?

PATCH failed: 409 {"error":{"code":"conflict","message":"Profile card property does not exist","innerError":{"peopleAdminErrorCode":"peopleAdminItemConflict","peopleAdminRequestId":"200291ef-2246-8392-5379-8242b6c8d672","peopleAdminClientRequestId":"c9a38a2f-927f-4f90-a0eb-d436633879f8","date":"2025-05-08T05:56:51","request-id":"c9a38a2f-927f-4f90-a0eb-d436633879f8","client-request-id":"c9a38a2f-927f-4f90-a0eb-d436633879f8"}}}

[Tanddant]

@Ashlesha-MSFT Root cause, and proper fix was suggested in #9368

[Tanddant]

The reason you're seeing profile property does not exist is that you need to create it before you can set it

https://learn.microsoft.com/en-us/graph/api/resources/profilecardproperty?view=graph-rest-1.0

[Ashlesha-MSFT]

@Tanddant,
Thank you for the clarification.

For my tenant, it succeeded as expected.
Please find the code snippet below for your reference.
Kindly let me know if I'm missing anything or if something seems incorrect.

private _patchProfileCardProperty = async (): Promise => {
try {
const client: AadHttpClient = await this.props.context.aadHttpClientFactory.getClient("https://graph.microsoft.com");

  const response = await client.fetch(
    "https://graph.microsoft.com/v1.0/admin/people/profileCardProperties/UserPrincipalName",
    AadHttpClient.configurations.v1,
    {
      method: "PATCH",
      headers: {
        "Content-Type": "application/json"
      },
      body: JSON.stringify({
        annotations: [
          {
            displayName: "UPN",
            localizations: [
              {
                displayName: "Test122",
                languageTag: "ar-TN"
              }
            ]
          }
        ]
      })
    }
  );

  if (response.ok) {
    console.log("PATCH successful!");
  } else {
    const errorText = await response.text();
    console.error("PATCH failed:", response.status, errorText);
  }
} catch (err) {
  console.error("Error patching profile card property:", err);
}

}
}

[Tanddant]

As documented in the original X thread (linked in #9368) I'm using the MSGraphClientV3 provided by SPFx

Something along the lines of

const _profileProperty: IProfileCardProperty = await msGraphClient
  .api(`/admin/people/profileCardProperties/${diretoryPropertyName}`)
  .patch(_updateProfileCardProperty);

Take a look at this (very old) branch of the SPFx samples for a reference

https://github.com/pnp/sp-dev-fx-webparts/blob/3e832cc838377de5156d8cf99a59f109ca9aea93/samples/react-manage-profile-card-properties/src/hooks/useProfileCardProperties.ts

If you're just using the AadHttpClient I would expect that you get a different result (but at the cost of having a nice SDK)

[Tanddant]

@Ashlesha-MSFT - You reacted to my comment, but left the "Needs: Author Feedback" label - would you care to remove that so the issue doesn't get wrongfully closed 😊

[Ashlesha-MSFT]

@Tanddant,
Thanks for pointing that out!
I’ve just removed the Needs: Author Feedback label now to avoid any confusion.

I attempted to reproduce the issue, but I couldn't replicate it on my end.

Kindly look into below code and suggest the things if I'm missing or implementing incorrectly.
`private _patchProfileCardProperty = async (): Promise => {
try {
const client: MSGraphClientV3 = await this.props.context.msGraphClientFactory.getClient('3');
const directoryPropertyName = 'UserPrincipalName';

  const patchBody = {
    annotations: [
      {
        displayName: 'UPN',
        localizations: [
          {
            displayName: 'Test122',
            languageTag: 'ar-TN',
          },
        ],
      },
    ],
  };

  await client.api(`/admin/people/profileCardProperties/${directoryPropertyName}`).patch(patchBody);

  console.log('PATCH successful!');
  await this._getProfileCardProperty(directoryPropertyName);
} catch (err) {
  console.error('Error patching profile card property:', err);
}

};`