DELETE microsoftAuthenticatorAuthenticationMethod returns 403 error for some users despite matching roles

Robert Le Roux 0 Reputation points
2026-11-06T11:06:02.79+00:00

The DELETE microsoftAuthenticatorAuthenticationMethod api has started returning a 403 error for some users.

The audit logs in the Entra admin centre are giving a status of clientError.

Users that are succeeding and failing have the same assigned roles in Entra and the API is being triggered from the same piece of code for everyone.

Microsoft Security | Microsoft Graph
0 comments No comments

1 answer

Sort by: Newest
  1. Vasil Michev 128.7K Reputation points MVP Volunteer Moderator
    2026-11-06T11:16:22.0966667+00:00

    When you say "started returning a 403 error", does this mean that you had it working for the same users/apps before? Are you performing this via delegate or app permissions?

    Just in case, you might want to retry with Privileged Authentication Administrator.

    Was this answer helpful?


Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.