如何使用 Microsoft Graph 更新云用户的扩展属性 API

Question

Microsoft's documentation states

For an onPremisesSyncEnabled user, the source of authority for this set of properties is the on-premises and is read-only. For a cloud-only user (where onPremisesSyncEnabled is false), these properties may be set during creation or update. These extension attributes are also known as Exchange custom attributes 1-15.

I have confirmed that this user is not sync nor has ever been synced

{
    "onPremisesDistinguishedName": null,
    "onPremisesDomainName": null,
    "onPremisesImmutableId": null,
    "onPremisesLastSyncDateTime": null,
    "onPremisesSecurityIdentifier": null,
    "onPremisesSamAccountName": null,
    "onPremisesSyncEnabled": null,
    "onPremisesUserPrincipalName": null,
}

Here is my request

Server: graph.microsoft.com
Path: /beta/users/<user id removed>
Method: PATCH

Body:
{
    "onPremisesExtensionAttributes": {
        "extensionAttribute14": "8500005",
        "extensionAttribute15": "008500005"
    }
}

Response

{
    "error": {
        "code": "Request_BadRequest",
        "message": "Unable to update the specified properties for objects that have originated within an external service.",
        "innerError": {
            "date": "...",
            "request-id": "...",
            "client-request-id": "..."
        }
    }
}

Answer 1

Recently we faced this issue with a client. where old accounts were throwing this error "Unable to update the specified properties for objects that have originated within an external service" when we are trying to use Graph API or Power Automate.

We confirmed with client if they were earlier synced on-premises but IT team had no information of past. So we run the command Set-MsolDirSyncEnabled -EnableDirSync $false

After running this command all extension attributes 1-15 were moved to Exchange online. We raised Microsoft Support ticket to change the source back to Azure AD. But after 1 month of long discussion we were told that "It's NOT Possible to revert back".

We have to create Azure runbook to update these extension attributes using PowerShell