Update-MgUserExtension returns "Resource not found for the segment 'extensions'" error

[manuel-falcao-magalhaes]

Describe the bug

I'm running the following command, as documented here: https://learn.microsoft.com/en-us/powershell/module/microsoft.graph.users/update-mguserextension?view=graph-powershell-1.0

Update-MgUserExtension -UserId 'admin@contoso.onmicrosoft.com' -ExtensionId @{ 'extension_bcea2d2d57514195bf64f617ca2aa09e_jobGroup' = 'test' }

But I'm getting this error:

Update-MgUserExtension : Resource not found for the segment 'extensions'.
Status: 400 (BadRequest)
ErrorCode: RequestBroker--ParseUri
Date:
Headers:
Transfer-Encoding : chunked
Connection : keep-alive
Strict-Transport-Security : max-age=31536000
request-id : e8e301bb-db53-47de-9d39-6f9b62b0861f
client-request-id : da2d544c-3dac-49fc-9e15-86ebda7e0e24
x-ms-ags-diagnostic : {"ServerInfo":{"DataCenter":"Switzerland
North","Slice":"E","Ring":"3","ScaleUnit":"000","RoleInstance":"ZR1PEPF00000663"}}
X-Cache : CONFIG_NOCACHE
Cache-Control : private
Date : Mon, 02 Feb 2026 10:46:47 GMT
At line:1 char:1

• Update-MgUserExtension -UserId 'admin@contoso.onmicrosoft.com' -Exten ...

•   + CategoryInfo          : InvalidOperation: ({ UserId = admi...raphExtension }:<>f__AnonymousType84`4) [Update-MgU
   serExtension_UpdateExpanded], Exception
    + FullyQualifiedErrorId : RequestBroker--ParseUri,Microsoft.Graph.PowerShell.Cmdlets.UpdateMgUserExtension_UpdateE
   xpanded
  
  

Expected behavior

I was expecting the user extension property to be updated successfully.

How to reproduce

1. After authenticating with Connect-MgGraph, run the following command, replacing the UserId and the value inside ExtensionId with values from your tenant:

Update-MgUserExtension -UserId 'admin@contoso.onmicrosoft.com' -ExtensionId @{ 'extension_bcea2d2d57514195bf64f617ca2aa09e_jobGroup' = 'test' }

2. The error will occur during execution.

SDK Version

2.28.0

Latest version known to work for scenario above?

No response

Known Workarounds

No response

Debug output

Click to expand log

Update-MgUserExtension -UserId 'admin@contoso.onmicrosoft.com' -ExtensionId @{ 'extension_bcea2d2d57514195bf64f617ca2aa09e_jobGroup' = 'test' } -Debug
DEBUG: [CmdletBeginProcessing]: - Update-MgUserExtension begin processing with parameterSet 'UpdateExpanded'.

Confirm
Continue with this operation?
[Y] Yes  [A] Yes to All  [H] Halt Command  [S] Suspend  [?] Help (default is "Y"): A
DEBUG: [Authentication]: - AuthType: 'Delegated', TokenCredentialType: 'InteractiveBrowser', ContextScope:
'CurrentUser', AppName: 'Microsoft Graph Command Line Tools'.
DEBUG: [Authentication]: - Scopes: [Agreement.ReadWrite.All, AllSites.Read, Application.Read.All,
Application.ReadWrite.All, AppRoleAssignment.ReadWrite.All, AuditLog.Read.All, Channel.ReadBasic.All,
DelegatedPermissionGrant.Read.All, DelegatedPermissionGrant.ReadWrite.All, DeviceManagementManagedDevices.Read.All,
Directory.AccessAsUser.All, Directory.Read.All, Directory.ReadWrite.All, EntitlementManagement.ReadWrite.All,
Files.ReadWrite.All, Files.ReadWrite.AppFolder, GroupMember.Read.All, OnPremDirectorySynchronization.ReadWrite.All,
openid, Policy.Read.All, Policy.ReadWrite.Authorization, Policy.ReadWrite.CrossTenantAccess,
PrivilegedAccess.Read.AzureADGroup, PrivilegedAssignmentSchedule.Read.AzureADGroup, profile, Reports.Read.All,
Sites.Read.All, Team.ReadBasic.All, User.Read, User.Read.All, User.ReadBasic.All, User.ReadWrite.All,
UserAuthenticationMethod.Read, UserAuthenticationMethod.Read.All, UserAuthenticationMethod.ReadWrite.All, email].

Confirm
Are you sure you want to perform this action?
Performing the operation "Update-MgUserExtension_UpdateExpanded" on target "Call remote 'PATCH
/users/{user-id}/extensions/{extension-id}' operation".
[Y] Yes  [A] Yes to All  [N] No  [L] No to All  [S] Suspend  [?] Help (default is "Y"): A
DEBUG: ============================ HTTP REQUEST ============================

HTTP Method:
PATCH

Absolute Uri:
https://graph.microsoft.com/v1.0/users/admin@contoso.onmicrosoft.com/extensions/System.Collections.Hashtable

Headers:
FeatureFlag                   : 00000003
Cache-Control                 : no-store, no-cache
User-Agent                    : Mozilla/5.0,(Windows NT 10.0; Microsoft Windows 10.0.26200;
pt-PT),PowerShell/5.1.26100.7462
SdkVersion                    : graph-powershell/2.28.0
client-request-id             : da2d544c-3dac-49fc-9e15-86ebda7e0e24

Body:
{}

DEBUG: ============================ HTTP RESPONSE ============================

Status Code:
BadRequest

Headers:
Transfer-Encoding             : chunked
Connection                    : keep-alive
Strict-Transport-Security     : max-age=31536000
request-id                    : e8e301bb-db53-47de-9d39-6f9b62b0861f
client-request-id             : da2d544c-3dac-49fc-9e15-86ebda7e0e24
x-ms-ags-diagnostic           : {"ServerInfo":{"DataCenter":"Switzerland
North","Slice":"E","Ring":"3","ScaleUnit":"000","RoleInstance":"ZR1PEPF00000663"}}
X-Cache                       : CONFIG_NOCACHE
Cache-Control                 : private
Date                          : Mon, 02 Feb 2026 10:46:47 GMT

Body:
{
  "error": {
    "code": "RequestBroker--ParseUri",
    "message": "Resource not found for the segment 'extensions'."
  }
}


Confirm
Resource not found for the segment 'extensions'.

Status: 400 (BadRequest)
ErrorCode: RequestBroker--ParseUri
Date:

Headers:
Transfer-Encoding             : chunked
Connection                    : keep-alive
Strict-Transport-Security     : max-age=31536000
request-id                    : e8e301bb-db53-47de-9d39-6f9b62b0861f
client-request-id             : da2d544c-3dac-49fc-9e15-86ebda7e0e24
x-ms-ags-diagnostic           : {"ServerInfo":{"DataCenter":"Switzerland
North","Slice":"E","Ring":"3","ScaleUnit":"000","RoleInstance":"ZR1PEPF00000663"}}
X-Cache                       : CONFIG_NOCACHE
Cache-Control                 : private
Date                          : Mon, 02 Feb 2026 10:46:47 GMT

[Y] Yes  [A] Yes to All  [H] Halt Command  [S] Suspend  [?] Help (default is "Y"): A
Update-MgUserExtension : Resource not found for the segment 'extensions'.
Status: 400 (BadRequest)
ErrorCode: RequestBroker--ParseUri
Date:
Headers:
Transfer-Encoding             : chunked
Connection                    : keep-alive
Strict-Transport-Security     : max-age=31536000
request-id                    : e8e301bb-db53-47de-9d39-6f9b62b0861f
client-request-id             : da2d544c-3dac-49fc-9e15-86ebda7e0e24
x-ms-ags-diagnostic           : {"ServerInfo":{"DataCenter":"Switzerland
North","Slice":"E","Ring":"3","ScaleUnit":"000","RoleInstance":"ZR1PEPF00000663"}}
X-Cache                       : CONFIG_NOCACHE
Cache-Control                 : private
Date                          : Mon, 02 Feb 2026 10:46:47 GMT
At line:1 char:1
+ Update-MgUserExtension -UserId 'admin@contoso.onmicrosoft.com' -Exten ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : InvalidOperation: ({ UserId = admi...raphExtension }:<>f__AnonymousType84`4) [Update-MgU
   serExtension_UpdateExpanded], Exception
    + FullyQualifiedErrorId : RequestBroker--ParseUri,Microsoft.Graph.PowerShell.Cmdlets.UpdateMgUserExtension_UpdateE
   xpanded
DEBUG: [CmdletEndProcessing]: - Update-MgUserExtension end processing.

Configuration

No response

Other information

This cmdlet is documented in the following places:
https://learn.microsoft.com/en-us/powershell/module/microsoft.graph.users/update-mguserextension?view=graph-powershell-1.0
https://learn.microsoft.com/en-us/powershell/microsoftgraph/azuread-msoline-cmdlet-map?view=graph-powershell-1.0&pivots=azure-ad-powershell

[MIchaelMainer]

Docs indicate that the ExtensionId is supposed to be a string, not an object. Please try correcting that input and report back whether that fixes this issue for you.

https://learn.microsoft.com/en-us/powershell/module/microsoft.graph.users/update-mguserextension?view=graph-powershell-1.0#updateexpanded

[manuel-falcao-magalhaes]

Thank you for the heads up @MIchaelMainer , unfortunately that did not work:

Debug output:

Update-MgUserExtension -UserId 'admin@contoso.onmicrosoft.com' -ExtensionId 'extension_bcea2d2d57514195bf64f617ca2aa09e_jobGroup' -Debug
DEBUG: [CmdletBeginProcessing]: - Update-MgUserExtension begin processing with parameterSet 'UpdateExpanded'.

Confirm
Continue with this operation?
[Y] Yes  [A] Yes to All  [H] Halt Command  [S] Suspend  [?] Help (default is "Y"): A
DEBUG: [Authentication]: - AuthType: 'Delegated', TokenCredentialType: 'InteractiveBrowser', ContextScope:
'CurrentUser', AppName: 'Microsoft Graph Command Line Tools'.
DEBUG: [Authentication]: - Scopes: [Agreement.ReadWrite.All, AllSites.Read, Application.Read.All,
Application.ReadWrite.All, AppRoleAssignment.ReadWrite.All, AuditLog.Read.All, Channel.ReadBasic.All,
DelegatedPermissionGrant.Read.All, DelegatedPermissionGrant.ReadWrite.All, DeviceManagementManagedDevices.Read.All,
Directory.AccessAsUser.All, Directory.Read.All, Directory.ReadWrite.All, EntitlementManagement.ReadWrite.All,
Files.ReadWrite.All, Files.ReadWrite.AppFolder, GroupMember.Read.All, OnPremDirectorySynchronization.ReadWrite.All,
openid, Policy.Read.All, Policy.ReadWrite.Authorization, Policy.ReadWrite.CrossTenantAccess,
PrivilegedAccess.Read.AzureADGroup, PrivilegedAssignmentSchedule.Read.AzureADGroup, profile, Reports.Read.All,
Sites.Read.All, Team.ReadBasic.All, User.Read, User.Read.All, User.ReadBasic.All, User.ReadWrite.All,
UserAuthenticationMethod.Read, UserAuthenticationMethod.Read.All, UserAuthenticationMethod.ReadWrite.All, email].

Confirm
Are you sure you want to perform this action?
Performing the operation "Update-MgUserExtension_UpdateExpanded" on target "Call remote 'PATCH
/users/{user-id}/extensions/{extension-id}' operation".
[Y] Yes  [A] Yes to All  [N] No  [L] No to All  [S] Suspend  [?] Help (default is "Y"): A
DEBUG: ============================ HTTP REQUEST ============================

HTTP Method:
PATCH

Absolute Uri:
https://graph.microsoft.com/v1.0/users/admin@contoso.onmicrosoft.com/extensions/extension_bcea2d2d57514195bf64f617ca2aa
09e_jobGroup

Headers:
FeatureFlag                   : 00000003
Cache-Control                 : no-store, no-cache
User-Agent                    : Mozilla/5.0,(Windows NT 10.0; Microsoft Windows 10.0.26200;
pt-PT),PowerShell/5.1.26100.7462
SdkVersion                    : graph-powershell/2.28.0
client-request-id             : a921d908-317d-4087-a003-eb56aa2db856

Body:
{}

DEBUG: ============================ HTTP RESPONSE ============================

Status Code:
BadRequest

Headers:
Transfer-Encoding             : chunked
Connection                    : keep-alive
Strict-Transport-Security     : max-age=31536000
request-id                    : d3892cef-e6a9-474e-b58d-ce21c9db0a60
client-request-id             : a921d908-317d-4087-a003-eb56aa2db856
x-ms-ags-diagnostic           : {"ServerInfo":{"DataCenter":"Switzerland
North","Slice":"E","Ring":"3","ScaleUnit":"002","RoleInstance":"ZR2PEPF0000065B"}}
X-Cache                       : CONFIG_NOCACHE
Cache-Control                 : private
Date                          : Tue, 03 Feb 2026 08:47:27 GMT

Body:
{
  "error": {
    "code": "RequestBroker--ParseUri",
    "message": "Resource not found for the segment 'extensions'."
  }
}


Confirm
Resource not found for the segment 'extensions'.

Status: 400 (BadRequest)
ErrorCode: RequestBroker--ParseUri
Date:

Headers:
Transfer-Encoding             : chunked
Connection                    : keep-alive
Strict-Transport-Security     : max-age=31536000
request-id                    : d3892cef-e6a9-474e-b58d-ce21c9db0a60
client-request-id             : a921d908-317d-4087-a003-eb56aa2db856
x-ms-ags-diagnostic           : {"ServerInfo":{"DataCenter":"Switzerland
North","Slice":"E","Ring":"3","ScaleUnit":"002","RoleInstance":"ZR2PEPF0000065B"}}
X-Cache                       : CONFIG_NOCACHE
Cache-Control                 : private
Date                          : Tue, 03 Feb 2026 08:47:27 GMT

[Y] Yes  [A] Yes to All  [H] Halt Command  [S] Suspend  [?] Help (default is "Y"): A
Update-MgUserExtension : Resource not found for the segment 'extensions'.
Status: 400 (BadRequest)
ErrorCode: RequestBroker--ParseUri
Date:
Headers:
Transfer-Encoding             : chunked
Connection                    : keep-alive
Strict-Transport-Security     : max-age=31536000
request-id                    : d3892cef-e6a9-474e-b58d-ce21c9db0a60
client-request-id             : a921d908-317d-4087-a003-eb56aa2db856
x-ms-ags-diagnostic           : {"ServerInfo":{"DataCenter":"Switzerland
North","Slice":"E","Ring":"3","ScaleUnit":"002","RoleInstance":"ZR2PEPF0000065B"}}
X-Cache                       : CONFIG_NOCACHE
Cache-Control                 : private
Date                          : Tue, 03 Feb 2026 08:47:27 GMT
At line:1 char:1
+ Update-MgUserExtension -UserId 'admin@contoso.onmicrosoft.com' -Exten ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : InvalidOperation: ({ UserId = admi...raphExtension }:<>f__AnonymousType84`4) [Update-MgU
   serExtension_UpdateExpanded], Exception
    + FullyQualifiedErrorId : RequestBroker--ParseUri,Microsoft.Graph.PowerShell.Cmdlets.UpdateMgUserExtension_UpdateE
   xpanded
DEBUG: [CmdletEndProcessing]: - Update-MgUserExtension end processing.
PS C:\Users\mmagalhaes> Update-MgUserExtension -UserId 'admin@contoso.onmicrosoft.com' -ExtensionId 'extension_bcea2d2d57514195bf64f617ca2aa09e_test' -Debug
DEBUG: [CmdletBeginProcessing]: - Update-MgUserExtension begin processing with parameterSet 'UpdateExpanded'.

Confirm
Continue with this operation?
[Y] Yes  [A] Yes to All  [H] Halt Command  [S] Suspend  [?] Help (default is "Y"): A
DEBUG: [Authentication]: - AuthType: 'Delegated', TokenCredentialType: 'InteractiveBrowser', ContextScope:
'CurrentUser', AppName: 'Microsoft Graph Command Line Tools'.
DEBUG: [Authentication]: - Scopes: [Agreement.ReadWrite.All, AllSites.Read, Application.Read.All,
Application.ReadWrite.All, AppRoleAssignment.ReadWrite.All, AuditLog.Read.All, Channel.ReadBasic.All,
DelegatedPermissionGrant.Read.All, DelegatedPermissionGrant.ReadWrite.All, DeviceManagementManagedDevices.Read.All,
Directory.AccessAsUser.All, Directory.Read.All, Directory.ReadWrite.All, EntitlementManagement.ReadWrite.All,
Files.ReadWrite.All, Files.ReadWrite.AppFolder, GroupMember.Read.All, OnPremDirectorySynchronization.ReadWrite.All,
openid, Policy.Read.All, Policy.ReadWrite.Authorization, Policy.ReadWrite.CrossTenantAccess,
PrivilegedAccess.Read.AzureADGroup, PrivilegedAssignmentSchedule.Read.AzureADGroup, profile, Reports.Read.All,
Sites.Read.All, Team.ReadBasic.All, User.Read, User.Read.All, User.ReadBasic.All, User.ReadWrite.All,
UserAuthenticationMethod.Read, UserAuthenticationMethod.Read.All, UserAuthenticationMethod.ReadWrite.All, email].

Confirm
Are you sure you want to perform this action?
Performing the operation "Update-MgUserExtension_UpdateExpanded" on target "Call remote 'PATCH
/users/{user-id}/extensions/{extension-id}' operation".
[Y] Yes  [A] Yes to All  [N] No  [L] No to All  [S] Suspend  [?] Help (default is "Y"): A
DEBUG: ============================ HTTP REQUEST ============================

HTTP Method:
PATCH

Absolute Uri:
https://graph.microsoft.com/v1.0/users/admin@contoso.onmicrosoft.com/extensions/extension_bcea2d2d57514195bf64f617ca2aa
09e_test

Headers:
FeatureFlag                   : 00000003
Cache-Control                 : no-store, no-cache
User-Agent                    : Mozilla/5.0,(Windows NT 10.0; Microsoft Windows 10.0.26200;
pt-PT),PowerShell/5.1.26100.7462
SdkVersion                    : graph-powershell/2.28.0
client-request-id             : 250c3f32-63fd-4e54-ba2c-8208f803db1f

Body:
{}

DEBUG: ============================ HTTP RESPONSE ============================

Status Code:
BadRequest

Headers:
Transfer-Encoding             : chunked
Connection                    : keep-alive
Strict-Transport-Security     : max-age=31536000
request-id                    : 8fad27ca-b824-4b47-aee7-e061b1e6c422
client-request-id             : 250c3f32-63fd-4e54-ba2c-8208f803db1f
x-ms-ags-diagnostic           : {"ServerInfo":{"DataCenter":"France
Central","Slice":"E","Ring":"5","ScaleUnit":"005","RoleInstance":"PA3PEPF00010525"}}
X-Cache                       : CONFIG_NOCACHE
Cache-Control                 : private
Date                          : Tue, 03 Feb 2026 08:49:29 GMT

Body:
{
  "error": {
    "code": "RequestBroker--ParseUri",
    "message": "Resource not found for the segment 'extensions'."
  }
}


Confirm
Resource not found for the segment 'extensions'.

Status: 400 (BadRequest)
ErrorCode: RequestBroker--ParseUri
Date:

Headers:
Transfer-Encoding             : chunked
Connection                    : keep-alive
Strict-Transport-Security     : max-age=31536000
request-id                    : 8fad27ca-b824-4b47-aee7-e061b1e6c422
client-request-id             : 250c3f32-63fd-4e54-ba2c-8208f803db1f
x-ms-ags-diagnostic           : {"ServerInfo":{"DataCenter":"France
Central","Slice":"E","Ring":"5","ScaleUnit":"005","RoleInstance":"PA3PEPF00010525"}}
X-Cache                       : CONFIG_NOCACHE
Cache-Control                 : private
Date                          : Tue, 03 Feb 2026 08:49:29 GMT

[Y] Yes  [A] Yes to All  [H] Halt Command  [S] Suspend  [?] Help (default is "Y"): A
Update-MgUserExtension : Resource not found for the segment 'extensions'.
Status: 400 (BadRequest)
ErrorCode: RequestBroker--ParseUri
Date:
Headers:
Transfer-Encoding             : chunked
Connection                    : keep-alive
Strict-Transport-Security     : max-age=31536000
request-id                    : 8fad27ca-b824-4b47-aee7-e061b1e6c422
client-request-id             : 250c3f32-63fd-4e54-ba2c-8208f803db1f
x-ms-ags-diagnostic           : {"ServerInfo":{"DataCenter":"France
Central","Slice":"E","Ring":"5","ScaleUnit":"005","RoleInstance":"PA3PEPF00010525"}}
X-Cache                       : CONFIG_NOCACHE
Cache-Control                 : private
Date                          : Tue, 03 Feb 2026 08:49:29 GMT
At line:1 char:1
+ Update-MgUserExtension -UserId 'admin@contoso.onmicrosoft.com' -Exten ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : InvalidOperation: ({ UserId = admi...raphExtension }:<>f__AnonymousType84`4) [Update-MgU
   serExtension_UpdateExpanded], Exception
    + FullyQualifiedErrorId : RequestBroker--ParseUri,Microsoft.Graph.PowerShell.Cmdlets.UpdateMgUserExtension_UpdateE
   xpanded
DEBUG: [CmdletEndProcessing]: - Update-MgUserExtension end processing.

Find-MgGraphCommand does not return any APIReferenceLink, so I suspect that the API that the cmdlet is calling does not exist.

Find-MgGraphCommand -Command Update-MgUserExtension | fl


Command          : Update-MgUserExtension
Module           : Users
APIVersion       : v1.0
Method           : PATCH
URI              : /users/{user-id}/extensions/{extension-id}
OutputType       :
ApiReferenceLink :
Variants         : {Update, UpdateExpanded, UpdateViaIdentity, UpdateViaIdentityExpanded}
Permissions      : {}
CommandAlias     : 

[gavinbarron]

@manuel-falcao-magalhaes reading the docs and interpreting a bit here, I think what you're trying to do is update an Entra Directory Extension value

And the cmdlet you're trying to use is for Open Extensions

So, for your task you want to use Update-MgUser, as noted in the mapping table in the entra docs you linked

Import-Module Microsoft.Graph.Users

$params = @{
	extension_bcea2d2d57514195bf64f617ca2aa09e_jobGroup = "test"
}

Update-MgUser -UserId $userId -BodyParameter $params

[microsoft-github-policy-service]

This issue has been automatically marked as stale because it has been marked as requiring author feedback but has not had any activity for 4 days. It will be closed if no further activity occurs within 3 days of this comment.