Set-PnPUserProfileProperty : This operation requires you to be managing your own data or have administrator privileges

[alan-hu]

Found another issue #277 but my issue looks different in term of error message, so I am not sure if they are the same or different.

I have a cloud only account with active SPO Admin role,

To reproduce, run the following:
Connect-PnPOnline -Url https://my-tenant-admin-site.sharepoint.com -credential (get-credential)
Set-PnPUserProfileProperty -Account someone-else-in-my-org-upn -Property "custom-property-name" -Value "this is a single-line-of-text"

This custom user profile property is a string type of user profile property that is editable but hidden from users' Edit Profile screen.

And we received the following error:
Set-PnPUserProfileProperty : This operation requires you to be managing your own data or have administrator privileges.
At line:1 char:1
+ Set-PnPUserProfileProperty -Account xxx.yyy@zzz -Property ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : WriteError: (:) [Set-PnPUserProfileProperty], ServerException
+ FullyQualifiedErrorId : EXCEPTION,PnP.PowerShell.Commands.UserProfiles.SetUserProfileProperty
`

[Blue2juice]

We have just tried this and are getting the same issue and error. Tested on many of the default OOTB properties too.

[keytrap-x86]

Everybody is currently waiting for a fix from Microsoft who are aware of this issue.
Please see my comment #277 (comment)

[mlsc63]

Hi all, yes it looks like there is a workaround before MS patched the problem. The only way is to connect differently to the service;
Connect-PnPOnline -S -Url $url -credential $creds

[mixermandan]

This works! so weird most of the other modules fail if not using -interactive but this one needed that -S.

[augiaugi]

worked for me too :) hope to get a bug fix.

[ghost]

worked for me as well!

[AndersRask]

It is not the only way to use -SPOManagementShell and the disadvantage is that it does not work interactively.
I usually go with ACS (Legacy) App Only where you create a client id the "good old way" using the portal:
https://learn.microsoft.com/en-us/sharepoint/dev/solution-guidance/security-apponly-azureacs

But yes, piggybacking on the SPO Management Shell application works too with credentials :)

[ZzyzxIsAlreadyTaken]

I am trying this with a Azure Automation account and a Azure Runbook. Im getting the same error message. Anyone with a fix for that? :)

Set-PnPUserProfileProperty: Line | 5 | … erprofile = Set-PnPUserProfileProperty -Account "username@tenantdomain.com … | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ | This operation requires you to be managing your own data or have administrator privileges.

Connect-PnPOnline https://tenant-admin.sharepoint.com -ManagedIdentity

$setuserprofile = Set-PnPUserProfileProperty -Account "username@tenantdomain.com" -PropertyName "Initials" -Value "asdafasdaf"

[Divvytown]

I am trying to follow these instructions, but when i get to the step where i need to trust the application the button is greyed out for me. I am logged in with both GA and Sharepoint Admin roles active, anyone have any tips for what i could check?

[AndersRask]

I have seen people have this issue, but haven't had it myself.
I found this old comment with 2 potential fixes, so maybe try those

_We are experiencing the same issue and have narrowed it down to the "AllowAppOnlyPolicy" flag. When set to false we can deploy an app w/o this error. –

I have found workaround for this issue. When we get the screen with disabled button "Trust It" go to "Site Content". Find your app and click "more information" button on the app. Then click "Permissions" link. You will see the screen with your app and error message that Your tenant administrator ..bla bla bla and in the last sentence click "here" link. After that you can enter your app without problem. Hope it will help someone. –_

https://stackoverflow.com/questions/38504451/sharepoint-online-app-installation-error

[Divvytown]

Thanks! The suggestion to use https://tenant-admin.sharepoint.com/_layouts/15/appinv.aspx worked for me. I am now able to connect to PNP Powershell using app registration and certificate based authentication.

[lfastrup]

Thx Anders - does indeed work by registering such an App.
I need to update some custom properties in the "good" old SharePoint user profiles. Hope we can get rid of that requirement one day.
The App connection will work until April 2026, where ACS is retired by MS!
Anyone here knows how to go about it without ACS?

[lfastrup]

Worked it out - Create an Azure App and grant SharePoint User.ReadWrite.All plus Sites.FullControl.All
Add a self-signed certificate.

Connect as follows:
$password = (ConvertTo-SecureString -AsPlainText 'myprivatekeypassword' -Force)
Connect-PnPOnline -Url "contoso.sharepoint.com" -ClientId 6c5c98c7-e05a-4a0f-bcfa-0cfc65aa1f28 -CertificatePath 'c:\mycertificate.pfx' -CertificatePassword $password -Tenant 'contoso.onmicrosoft.com'

I was then able to update user profile properties using the cmdlet Set-PnPUserProfileProperty

[mixermandan]

I haven’t used runbooks so I couldn’t say if you’re having an issue with passing the credentials, however the connect-pnponline command doesn’t work correctly for the set-pnpuserprofile command it’s a bug. You must use Connect-PnPOnline -S -Url $AdminSiteURL -Credentials $cred From: Kjetil Ytrehus-Lynum ***@***.***> Sent: May 9, 2023 6:12 AM To: pnp/powershell ***@***.***> Cc: Dan Charles ***@***.***>; Comment ***@***.***> Subject: Re: [pnp/powershell] Set-PnPUserProfileProperty : This operation requires you to be managing your own data or have administrator privileges (Discussion #2155) I am trying this with a Azure Automation account and a Azure Runbook. Im getting the same error message. Anyone with a fix for that? :) Set-PnPUserProfileProperty: Line | 5 | … erprofile = Set-PnPUserProfileProperty -Account ***@***.******@***.***> … | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ | This operation requires you to be managing your own data or have administrator privileges. `Connect-PnPOnline https://tenant-admin.sharepoint.com/<https://tenant-admin.sharepoint.com/> -ManagedIdentity $setuserprofile = Set-PnPUserProfileProperty -Account ***@***.******@***.***>" -PropertyName "Initials" -Value "asdafasdaf"` — Reply to this email directly, view it on GitHub<#2155 (comment)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AS7MSJZDMOPSMZKOVHS77QDXFI7CHANCNFSM6AAAAAARZKAG5E>. You are receiving this because you commented.Message ID: ***@***.******@***.***>>