Teams Provisioning: "Authorization_RequestDenied: Insufficient privileges to complete the operation" (4382101)

Microsoft has introduced a new restriction that prevents adding group or team members with delegated permissions through the Microsoft Graph API. This affects our Teams provisioning process, specifically the automated step that adds the ODMT migration service account to source teams. This change is currently being rolled out gradually by Microsoft, so not all tenants are impacted yet. 

Impact

• Provisioning Status: Teams provisioning tasks finish with a “completed with issue” status.
• Event Logging: "Authorization_RequestDenied: Insufficient privileges to complete the operation".
• Team Creation: All target teams and channels are still created successfully.
• Feature Impact: Only features that require the migration service account to be a member of the source teams are affected.
• Migration Service Account: The service account is not added automatically to source teams during provisioning.

Microsoft now requires application permissions, not delegated permissions, for adding members to groups and teams via Microsoft Graph. This change prevents our current delegated-permission process from completing the “Add Member”-operation.

Behaviour Observed on February 11, 2026 until the fix was deployed on February 12, 2026 at 1:45pm EST

• Provisioning tasks succeed except for the step that adds the migration service account (which logs the error and updates the status accordingly to "completed with issues").
• Any migration features that rely on the service account being a member of the source team won’t work until the account is added.

Mitigation

• If the following error was observed in your task events, you must create and run a new Teams Provisioning task using the Merge option.
  • "Authorization_RequestDenied: Insufficient privileges to complete the operation"