Return
-
Title
Creating or Merging Azure Accounts the Follow Error is Displayed "Insufficient privileges to complete the operation". -
Description
When using the migrate task in ODM (On Demand Migration) the error "Insufficient privileges to complete the operation" is displayed and the account is not created. -
Cause
Thus is caused by recent changes by Microsoft in Azure. The mobile attribute and some others cannot be updated using the admin consent granted to On Demand Migration application.
-
Resolution
Manual steps from PowerShell required from customer to grant the access.
The corresponding service principal has to be granted at least Helpdesk Administrator role:
Work-around:
```$servicePrincipal = Get-AzureADServicePrincipal -All $true | where AppId -eq b58728b1-0960-4f78-96d6-1a4063d1701a
$role = Get-AzureADDirectoryRole | Where-Object {$_.displayName -eq 'Helpdesk Administrator'}
Add-AzureADDirectoryRoleMember -ObjectId $role.ObjectId -RefObjectId $servicePrincipal.ObjectId```