Update users-passwordprofile-permissions.md

api-reference/beta/includes/users-passwordprofile-permissions.md

@@ -10,4 +10,4 @@ ms.topic: include
 - In delegated scenarios, the calling app must be assigned a supported permission *and* a supported Microsoft Entra role.
   - *Privileged Authentication Administrator* is the least privileged role that's allowed to update this property for *all* administrators in the tenant.
   - In general, the signed-in user must have a higher privileged administrator role as indicated in [Who can reset passwords](/graph/api/resources/users#who-can-reset-passwords).
-- In app-only scenarios, the calling app must be assigned a supported permission *and* at least the *User Administrator* [Microsoft Entra role](/entra/identity/role-based-access-control/permissions-reference?toc=%2Fgraph%2Ftoc.json).
+- In app-only scenarios, the calling app must be assigned *User-PasswordProfile.ReadWrite.All* and at least *User.ReadWrite.All*.

api-reference/v1.0/includes/users-passwordprofile-permissions.md

@@ -10,4 +10,4 @@ ms.topic: include
 - In delegated scenarios, the calling app must be assigned a supported permission *and* a supported Microsoft Entra role.
   - *Privileged Authentication Administrator* is the least privileged role that's allowed to update this property for *all* administrators in the tenant.
   - In general, the signed-in user must have a higher privileged administrator role as indicated in [Who can reset passwords](/graph/api/resources/users#who-can-reset-passwords).
-- In app-only scenarios, the calling app must be assigned a supported permission *and* at least the *User Administrator* [Microsoft Entra role](/entra/identity/role-based-access-control/permissions-reference?toc=%2Fgraph%2Ftoc.json).
+- In app-only scenarios, the calling app must be assigned *User-PasswordProfile.ReadWrite.All* and at least *User.ReadWrite.All*.