Update-MgUserExtension returns "Resource not found for the segment 'extensions'" error

[manuel-falcao-magalhaes]

Describe the bug

I'm running the following command, as documented here: https://learn.microsoft.com/en-us/powershell/module/microsoft.graph.users/update-mguserextension?view=graph-powershell-1.0

Update-MgUserExtension -UserId 'admin@contoso.onmicrosoft.com' -ExtensionId @{ 'extension_bcea2d2d57514195bf64f617ca2aa09e_jobGroup' = 'test' }

But I'm getting this error:

Update-MgUserExtension : Resource not found for the segment 'extensions'.
Status: 400 (BadRequest)
ErrorCode: RequestBroker--ParseUri
Date:
Headers:
Transfer-Encoding : chunked
Connection : keep-alive
Strict-Transport-Security : max-age=31536000
request-id : e8e301bb-db53-47de-9d39-6f9b62b0861f
client-request-id : da2d544c-3dac-49fc-9e15-86ebda7e0e24
x-ms-ags-diagnostic : {"ServerInfo":{"DataCenter":"Switzerland
North","Slice":"E","Ring":"3","ScaleUnit":"000","RoleInstance":"ZR1PEPF00000663"}}
X-Cache : CONFIG_NOCACHE
Cache-Control : private
Date : Mon, 02 Feb 2026 10:46:47 GMT
At line:1 char:1

• Update-MgUserExtension -UserId 'admin@contoso.onmicrosoft.com' -Exten ...

•   + CategoryInfo          : InvalidOperation: ({ UserId = admi...raphExtension }:<>f__AnonymousType84`4) [Update-MgU
   serExtension_UpdateExpanded], Exception
    + FullyQualifiedErrorId : RequestBroker--ParseUri,Microsoft.Graph.PowerShell.Cmdlets.UpdateMgUserExtension_UpdateE
   xpanded
  
  

Expected behavior

I was expecting the user extension property to be updated successfully.

How to reproduce

1. After authenticating with Connect-MgGraph, run the following command, replacing the UserId and the value inside ExtensionId with values from your tenant:

Update-MgUserExtension -UserId 'admin@contoso.onmicrosoft.com' -ExtensionId @{ 'extension_bcea2d2d57514195bf64f617ca2aa09e_jobGroup' = 'test' }

2. The error will occur during execution.

SDK Version

2.28.0

Latest version known to work for scenario above?

No response

Known Workarounds

No response

Debug output

Click to expand log

Update-MgUserExtension -UserId 'admin@contoso.onmicrosoft.com' -ExtensionId @{ 'extension_bcea2d2d57514195bf64f617ca2aa09e_jobGroup' = 'test' } -Debug
DEBUG: [CmdletBeginProcessing]: - Update-MgUserExtension begin processing with parameterSet 'UpdateExpanded'.

Confirm
Continue with this operation?
[Y] Yes  [A] Yes to All  [H] Halt Command  [S] Suspend  [?] Help (default is "Y"): A
DEBUG: [Authentication]: - AuthType: 'Delegated', TokenCredentialType: 'InteractiveBrowser', ContextScope:
'CurrentUser', AppName: 'Microsoft Graph Command Line Tools'.
DEBUG: [Authentication]: - Scopes: [Agreement.ReadWrite.All, AllSites.Read, Application.Read.All,
Application.ReadWrite.All, AppRoleAssignment.ReadWrite.All, AuditLog.Read.All, Channel.ReadBasic.All,
DelegatedPermissionGrant.Read.All, DelegatedPermissionGrant.ReadWrite.All, DeviceManagementManagedDevices.Read.All,
Directory.AccessAsUser.All, Directory.Read.All, Directory.ReadWrite.All, EntitlementManagement.ReadWrite.All,
Files.ReadWrite.All, Files.ReadWrite.AppFolder, GroupMember.Read.All, OnPremDirectorySynchronization.ReadWrite.All,
openid, Policy.Read.All, Policy.ReadWrite.Authorization, Policy.ReadWrite.CrossTenantAccess,
PrivilegedAccess.Read.AzureADGroup, PrivilegedAssignmentSchedule.Read.AzureADGroup, profile, Reports.Read.All,
Sites.Read.All, Team.ReadBasic.All, User.Read, User.Read.All, User.ReadBasic.All, User.ReadWrite.All,
UserAuthenticationMethod.Read, UserAuthenticationMethod.Read.All, UserAuthenticationMethod.ReadWrite.All, email].

Confirm
Are you sure you want to perform this action?
Performing the operation "Update-MgUserExtension_UpdateExpanded" on target "Call remote 'PATCH
/users/{user-id}/extensions/{extension-id}' operation".
[Y] Yes  [A] Yes to All  [N] No  [L] No to All  [S] Suspend  [?] Help (default is "Y"): A
DEBUG: ============================ HTTP REQUEST ============================

HTTP Method:
PATCH

Absolute Uri:
https://graph.microsoft.com/v1.0/users/admin@contoso.onmicrosoft.com/extensions/System.Collections.Hashtable

Headers:
FeatureFlag                   : 00000003
Cache-Control                 : no-store, no-cache
User-Agent                    : Mozilla/5.0,(Windows NT 10.0; Microsoft Windows 10.0.26200;
pt-PT),PowerShell/5.1.26100.7462
SdkVersion                    : graph-powershell/2.28.0
client-request-id             : da2d544c-3dac-49fc-9e15-86ebda7e0e24

Body:
{}

DEBUG: ============================ HTTP RESPONSE ============================

Status Code:
BadRequest

Headers:
Transfer-Encoding             : chunked
Connection                    : keep-alive
Strict-Transport-Security     : max-age=31536000
request-id                    : e8e301bb-db53-47de-9d39-6f9b62b0861f
client-request-id             : da2d544c-3dac-49fc-9e15-86ebda7e0e24
x-ms-ags-diagnostic           : {"ServerInfo":{"DataCenter":"Switzerland
North","Slice":"E","Ring":"3","ScaleUnit":"000","RoleInstance":"ZR1PEPF00000663"}}
X-Cache                       : CONFIG_NOCACHE
Cache-Control                 : private
Date                          : Mon, 02 Feb 2026 10:46:47 GMT

Body:
{
  "error": {
    "code": "RequestBroker--ParseUri",
    "message": "Resource not found for the segment 'extensions'."
  }
}


Confirm
Resource not found for the segment 'extensions'.

Status: 400 (BadRequest)
ErrorCode: RequestBroker--ParseUri
Date:

Headers:
Transfer-Encoding             : chunked
Connection                    : keep-alive
Strict-Transport-Security     : max-age=31536000
request-id                    : e8e301bb-db53-47de-9d39-6f9b62b0861f
client-request-id             : da2d544c-3dac-49fc-9e15-86ebda7e0e24
x-ms-ags-diagnostic           : {"ServerInfo":{"DataCenter":"Switzerland
North","Slice":"E","Ring":"3","ScaleUnit":"000","RoleInstance":"ZR1PEPF00000663"}}
X-Cache                       : CONFIG_NOCACHE
Cache-Control                 : private
Date                          : Mon, 02 Feb 2026 10:46:47 GMT

[Y] Yes  [A] Yes to All  [H] Halt Command  [S] Suspend  [?] Help (default is "Y"): A
Update-MgUserExtension : Resource not found for the segment 'extensions'.
Status: 400 (BadRequest)
ErrorCode: RequestBroker--ParseUri
Date:
Headers:
Transfer-Encoding             : chunked
Connection                    : keep-alive
Strict-Transport-Security     : max-age=31536000
request-id                    : e8e301bb-db53-47de-9d39-6f9b62b0861f
client-request-id             : da2d544c-3dac-49fc-9e15-86ebda7e0e24
x-ms-ags-diagnostic           : {"ServerInfo":{"DataCenter":"Switzerland
North","Slice":"E","Ring":"3","ScaleUnit":"000","RoleInstance":"ZR1PEPF00000663"}}
X-Cache                       : CONFIG_NOCACHE
Cache-Control                 : private
Date                          : Mon, 02 Feb 2026 10:46:47 GMT
At line:1 char:1
+ Update-MgUserExtension -UserId 'admin@contoso.onmicrosoft.com' -Exten ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : InvalidOperation: ({ UserId = admi...raphExtension }:<>f__AnonymousType84`4) [Update-MgU
   serExtension_UpdateExpanded], Exception
    + FullyQualifiedErrorId : RequestBroker--ParseUri,Microsoft.Graph.PowerShell.Cmdlets.UpdateMgUserExtension_UpdateE
   xpanded
DEBUG: [CmdletEndProcessing]: - Update-MgUserExtension end processing.

Configuration

No response

Other information

This cmdlet is documented in the following places:
https://learn.microsoft.com/en-us/powershell/module/microsoft.graph.users/update-mguserextension?view=graph-powershell-1.0
https://learn.microsoft.com/en-us/powershell/microsoftgraph/azuread-msoline-cmdlet-map?view=graph-powershell-1.0&pivots=azure-ad-powershell

[MIchaelMainer]

Docs indicate that the ExtensionId is supposed to be a string, not an object. Please try correcting that input and report back whether that fixes this issue for you.

https://learn.microsoft.com/en-us/powershell/module/microsoft.graph.users/update-mguserextension?view=graph-powershell-1.0#updateexpanded

[manuel-falcao-magalhaes]

Thank you for the heads up @MIchaelMainer , unfortunately that did not work:

Debug output:

Update-MgUserExtension -UserId 'admin@contoso.onmicrosoft.com' -ExtensionId 'extension_bcea2d2d57514195bf64f617ca2aa09e_jobGroup' -Debug
DEBUG: [CmdletBeginProcessing]: - Update-MgUserExtension begin processing with parameterSet 'UpdateExpanded'.

Confirm
Continue with this operation?
[Y] Yes  [A] Yes to All  [H] Halt Command  [S] Suspend  [?] Help (default is "Y"): A
DEBUG: [Authentication]: - AuthType: 'Delegated', TokenCredentialType: 'InteractiveBrowser', ContextScope:
'CurrentUser', AppName: 'Microsoft Graph Command Line Tools'.
DEBUG: [Authentication]: - Scopes: [Agreement.ReadWrite.All, AllSites.Read, Application.Read.All,
Application.ReadWrite.All, AppRoleAssignment.ReadWrite.All, AuditLog.Read.All, Channel.ReadBasic.All,
DelegatedPermissionGrant.Read.All, DelegatedPermissionGrant.ReadWrite.All, DeviceManagementManagedDevices.Read.All,
Directory.AccessAsUser.All, Directory.Read.All, Directory.ReadWrite.All, EntitlementManagement.ReadWrite.All,
Files.ReadWrite.All, Files.ReadWrite.AppFolder, GroupMember.Read.All, OnPremDirectorySynchronization.ReadWrite.All,
openid, Policy.Read.All, Policy.ReadWrite.Authorization, Policy.ReadWrite.CrossTenantAccess,
PrivilegedAccess.Read.AzureADGroup, PrivilegedAssignmentSchedule.Read.AzureADGroup, profile, Reports.Read.All,
Sites.Read.All, Team.ReadBasic.All, User.Read, User.Read.All, User.ReadBasic.All, User.ReadWrite.All,
UserAuthenticationMethod.Read, UserAuthenticationMethod.Read.All, UserAuthenticationMethod.ReadWrite.All, email].

Confirm
Are you sure you want to perform this action?
Performing the operation "Update-MgUserExtension_UpdateExpanded" on target "Call remote 'PATCH
/users/{user-id}/extensions/{extension-id}' operation".
[Y] Yes  [A] Yes to All  [N] No  [L] No to All  [S] Suspend  [?] Help (default is "Y"): A
DEBUG: ============================ HTTP REQUEST ============================

HTTP Method:
PATCH

Absolute Uri:
https://graph.microsoft.com/v1.0/users/admin@contoso.onmicrosoft.com/extensions/extension_bcea2d2d57514195bf64f617ca2aa
09e_jobGroup

Headers:
FeatureFlag                   : 00000003
Cache-Control                 : no-store, no-cache
User-Agent                    : Mozilla/5.0,(Windows NT 10.0; Microsoft Windows 10.0.26200;
pt-PT),PowerShell/5.1.26100.7462
SdkVersion                    : graph-powershell/2.28.0
client-request-id             : a921d908-317d-4087-a003-eb56aa2db856

Body:
{}

DEBUG: ============================ HTTP RESPONSE ============================

Status Code:
BadRequest

Headers:
Transfer-Encoding             : chunked
Connection                    : keep-alive
Strict-Transport-Security     : max-age=31536000
request-id                    : d3892cef-e6a9-474e-b58d-ce21c9db0a60
client-request-id             : a921d908-317d-4087-a003-eb56aa2db856
x-ms-ags-diagnostic           : {"ServerInfo":{"DataCenter":"Switzerland
North","Slice":"E","Ring":"3","ScaleUnit":"002","RoleInstance":"ZR2PEPF0000065B"}}
X-Cache                       : CONFIG_NOCACHE
Cache-Control                 : private
Date                          : Tue, 03 Feb 2026 08:47:27 GMT

Body:
{
  "error": {
    "code": "RequestBroker--ParseUri",
    "message": "Resource not found for the segment 'extensions'."
  }
}


Confirm
Resource not found for the segment 'extensions'.

Status: 400 (BadRequest)
ErrorCode: RequestBroker--ParseUri
Date:

Headers:
Transfer-Encoding             : chunked
Connection                    : keep-alive
Strict-Transport-Security     : max-age=31536000
request-id                    : d3892cef-e6a9-474e-b58d-ce21c9db0a60
client-request-id             : a921d908-317d-4087-a003-eb56aa2db856
x-ms-ags-diagnostic           : {"ServerInfo":{"DataCenter":"Switzerland
North","Slice":"E","Ring":"3","ScaleUnit":"002","RoleInstance":"ZR2PEPF0000065B"}}
X-Cache                       : CONFIG_NOCACHE
Cache-Control                 : private
Date                          : Tue, 03 Feb 2026 08:47:27 GMT

[Y] Yes  [A] Yes to All  [H] Halt Command  [S] Suspend  [?] Help (default is "Y"): A
Update-MgUserExtension : Resource not found for the segment 'extensions'.
Status: 400 (BadRequest)
ErrorCode: RequestBroker--ParseUri
Date:
Headers:
Transfer-Encoding             : chunked
Connection                    : keep-alive
Strict-Transport-Security     : max-age=31536000
request-id                    : d3892cef-e6a9-474e-b58d-ce21c9db0a60
client-request-id             : a921d908-317d-4087-a003-eb56aa2db856
x-ms-ags-diagnostic           : {"ServerInfo":{"DataCenter":"Switzerland
North","Slice":"E","Ring":"3","ScaleUnit":"002","RoleInstance":"ZR2PEPF0000065B"}}
X-Cache                       : CONFIG_NOCACHE
Cache-Control                 : private
Date                          : Tue, 03 Feb 2026 08:47:27 GMT
At line:1 char:1
+ Update-MgUserExtension -UserId 'admin@contoso.onmicrosoft.com' -Exten ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : InvalidOperation: ({ UserId = admi...raphExtension }:<>f__AnonymousType84`4) [Update-MgU
   serExtension_UpdateExpanded], Exception
    + FullyQualifiedErrorId : RequestBroker--ParseUri,Microsoft.Graph.PowerShell.Cmdlets.UpdateMgUserExtension_UpdateE
   xpanded
DEBUG: [CmdletEndProcessing]: - Update-MgUserExtension end processing.
PS C:\Users\mmagalhaes> Update-MgUserExtension -UserId 'admin@contoso.onmicrosoft.com' -ExtensionId 'extension_bcea2d2d57514195bf64f617ca2aa09e_test' -Debug
DEBUG: [CmdletBeginProcessing]: - Update-MgUserExtension begin processing with parameterSet 'UpdateExpanded'.

Confirm
Continue with this operation?
[Y] Yes  [A] Yes to All  [H] Halt Command  [S] Suspend  [?] Help (default is "Y"): A
DEBUG: [Authentication]: - AuthType: 'Delegated', TokenCredentialType: 'InteractiveBrowser', ContextScope:
'CurrentUser', AppName: 'Microsoft Graph Command Line Tools'.
DEBUG: [Authentication]: - Scopes: [Agreement.ReadWrite.All, AllSites.Read, Application.Read.All,
Application.ReadWrite.All, AppRoleAssignment.ReadWrite.All, AuditLog.Read.All, Channel.ReadBasic.All,
DelegatedPermissionGrant.Read.All, DelegatedPermissionGrant.ReadWrite.All, DeviceManagementManagedDevices.Read.All,
Directory.AccessAsUser.All, Directory.Read.All, Directory.ReadWrite.All, EntitlementManagement.ReadWrite.All,
Files.ReadWrite.All, Files.ReadWrite.AppFolder, GroupMember.Read.All, OnPremDirectorySynchronization.ReadWrite.All,
openid, Policy.Read.All, Policy.ReadWrite.Authorization, Policy.ReadWrite.CrossTenantAccess,
PrivilegedAccess.Read.AzureADGroup, PrivilegedAssignmentSchedule.Read.AzureADGroup, profile, Reports.Read.All,
Sites.Read.All, Team.ReadBasic.All, User.Read, User.Read.All, User.ReadBasic.All, User.ReadWrite.All,
UserAuthenticationMethod.Read, UserAuthenticationMethod.Read.All, UserAuthenticationMethod.ReadWrite.All, email].

Confirm
Are you sure you want to perform this action?
Performing the operation "Update-MgUserExtension_UpdateExpanded" on target "Call remote 'PATCH
/users/{user-id}/extensions/{extension-id}' operation".
[Y] Yes  [A] Yes to All  [N] No  [L] No to All  [S] Suspend  [?] Help (default is "Y"): A
DEBUG: ============================ HTTP REQUEST ============================

HTTP Method:
PATCH

Absolute Uri:
https://graph.microsoft.com/v1.0/users/admin@contoso.onmicrosoft.com/extensions/extension_bcea2d2d57514195bf64f617ca2aa
09e_test

Headers:
FeatureFlag                   : 00000003
Cache-Control                 : no-store, no-cache
User-Agent                    : Mozilla/5.0,(Windows NT 10.0; Microsoft Windows 10.0.26200;
pt-PT),PowerShell/5.1.26100.7462
SdkVersion                    : graph-powershell/2.28.0
client-request-id             : 250c3f32-63fd-4e54-ba2c-8208f803db1f

Body:
{}

DEBUG: ============================ HTTP RESPONSE ============================

Status Code:
BadRequest

Headers:
Transfer-Encoding             : chunked
Connection                    : keep-alive
Strict-Transport-Security     : max-age=31536000
request-id                    : 8fad27ca-b824-4b47-aee7-e061b1e6c422
client-request-id             : 250c3f32-63fd-4e54-ba2c-8208f803db1f
x-ms-ags-diagnostic           : {"ServerInfo":{"DataCenter":"France
Central","Slice":"E","Ring":"5","ScaleUnit":"005","RoleInstance":"PA3PEPF00010525"}}
X-Cache                       : CONFIG_NOCACHE
Cache-Control                 : private
Date                          : Tue, 03 Feb 2026 08:49:29 GMT

Body:
{
  "error": {
    "code": "RequestBroker--ParseUri",
    "message": "Resource not found for the segment 'extensions'."
  }
}


Confirm
Resource not found for the segment 'extensions'.

Status: 400 (BadRequest)
ErrorCode: RequestBroker--ParseUri
Date:

Headers:
Transfer-Encoding             : chunked
Connection                    : keep-alive
Strict-Transport-Security     : max-age=31536000
request-id                    : 8fad27ca-b824-4b47-aee7-e061b1e6c422
client-request-id             : 250c3f32-63fd-4e54-ba2c-8208f803db1f
x-ms-ags-diagnostic           : {"ServerInfo":{"DataCenter":"France
Central","Slice":"E","Ring":"5","ScaleUnit":"005","RoleInstance":"PA3PEPF00010525"}}
X-Cache                       : CONFIG_NOCACHE
Cache-Control                 : private
Date                          : Tue, 03 Feb 2026 08:49:29 GMT

[Y] Yes  [A] Yes to All  [H] Halt Command  [S] Suspend  [?] Help (default is "Y"): A
Update-MgUserExtension : Resource not found for the segment 'extensions'.
Status: 400 (BadRequest)
ErrorCode: RequestBroker--ParseUri
Date:
Headers:
Transfer-Encoding             : chunked
Connection                    : keep-alive
Strict-Transport-Security     : max-age=31536000
request-id                    : 8fad27ca-b824-4b47-aee7-e061b1e6c422
client-request-id             : 250c3f32-63fd-4e54-ba2c-8208f803db1f
x-ms-ags-diagnostic           : {"ServerInfo":{"DataCenter":"France
Central","Slice":"E","Ring":"5","ScaleUnit":"005","RoleInstance":"PA3PEPF00010525"}}
X-Cache                       : CONFIG_NOCACHE
Cache-Control                 : private
Date                          : Tue, 03 Feb 2026 08:49:29 GMT
At line:1 char:1
+ Update-MgUserExtension -UserId 'admin@contoso.onmicrosoft.com' -Exten ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : InvalidOperation: ({ UserId = admi...raphExtension }:<>f__AnonymousType84`4) [Update-MgU
   serExtension_UpdateExpanded], Exception
    + FullyQualifiedErrorId : RequestBroker--ParseUri,Microsoft.Graph.PowerShell.Cmdlets.UpdateMgUserExtension_UpdateE
   xpanded
DEBUG: [CmdletEndProcessing]: - Update-MgUserExtension end processing.

Find-MgGraphCommand does not return any APIReferenceLink, so I suspect that the API that the cmdlet is calling does not exist.

Find-MgGraphCommand -Command Update-MgUserExtension | fl


Command          : Update-MgUserExtension
Module           : Users
APIVersion       : v1.0
Method           : PATCH
URI              : /users/{user-id}/extensions/{extension-id}
OutputType       :
ApiReferenceLink :
Variants         : {Update, UpdateExpanded, UpdateViaIdentity, UpdateViaIdentityExpanded}
Permissions      : {}
CommandAlias     :