I am trying to set up a PA Flow to manage an offboarding scenario that updates an employee's "employeeLeaveDateTime" property when offboarding.
I can use "GET" successfully, but I cannot PATCH the update as I get the above error. I've tried the following:
- Setting Application permissions and ensuring it has not just one, but all, of the recommended permissions
- I've granted Admin consent for Application permission
- I've re-created the flow and HTTP step in case it was a cache issue
- I've waited for a couple of hours after setting permissions.
- I've tested in Graph Explorer, and the call and JSON work there but using my Admin account.
- I've tested creating a user and can do that.
- So I can GET and POST, but not PATCH
Can anyone see what I am doing wrong here, or point me in a better direction to troubleshoot?


Right now, I am just trying to get it to update one property, but I can't see what else is there for me to set/configure.
This is the eventual error:
{
"error": {
"code": "Authorization_RequestDenied",
"message": "Insufficient privileges to complete the operation.",
"innerError": {
"date": "2023-03-03T21:16:49",
"request-id": "XXXXXXXX",
"client-request-id": "XXXXXXXX"
}
}
}