Update-MgBetaUser
PATCH /users/{user-id} (beta)
Module: Microsoft.Graph.Beta.Users
Permissions
Delegated (work or school)
- User.ReadWrite.All (least privilege)
- AgentIdUser.ReadWrite.All
- AgentIdUser.ReadWrite.IdentityParentedBy
- DeviceManagementApps.ReadWrite.All
- DeviceManagementConfiguration.ReadWrite.All
- DeviceManagementManagedDevices.ReadWrite.All
- DeviceManagementServiceConfig.ReadWrite.All
- Directory.ReadWrite.All
- User-Mail.ReadWrite.All
- User-PasswordProfile.ReadWrite.All
- User-Phone.ReadWrite.All
- User.EnableDisableAccount.All
- User.ManageIdentities.All
- User.ReadWrite
Delegated (personal)
- User.ReadWrite (least privilege)
Application
- User.ReadWrite.All (least privilege)
- User.ReadWrite.CrossCloud
- AgentIdUser.ReadWrite.IdentityParentedBy
- DeviceManagementApps.ReadWrite.All
- DeviceManagementConfiguration.ReadWrite.All
- DeviceManagementManagedDevices.ReadWrite.All
- DeviceManagementServiceConfig.ReadWrite.All
- Directory.ReadWrite.All
- User-Mail.ReadWrite.All
- User-PasswordProfile.ReadWrite.All
- User-Phone.ReadWrite.All
- User.EnableDisableAccount.All
- User.ManageIdentities.All
- AgentIdUser.ReadWrite.All
Source: Microsoft Graph PowerShell SDK metadata
Confirm property-specific permissions, Entra roles, licensing and ownership requirements in the official documentation. SDK metadata outside the verified sample is not independently certified.