I imagine that you can do a search for “assign licenses with Microsoft Graph PowerShell SDK” and find articles to explain how to do what you want, including articles that I have written.

====================================

Please can you help me to correct this script and share it back

thanks

What kind of Excel sheet with what data?

Any example of Excel sheet ?

As a Microsoft person might say: “thank you for your feedback…”

It kinda feels like Microsoft is saying, “Helo! We’re going to take away some of your most useful tools shortly. However, don’t worry, we’re going to replace them with “new” tools, and the new tools will have features your current tools don’t have! Admittedly, many of those features don’t exist or don’t work yet. Also, some of the new tools aren’t actually usable tools yet, they’re just pictures of tools we’ll give you later. Probably. And, some of the tools are missing important pieces. Don’t worry, though; a hammer can still be useful, even if it doesn’t have a handle yet. And this drill will amaze you once we add the battery and drill bits! Also, we only have 12 pages out of the 500 page instruction manual written right now. You have until next week to stop using your existing tools (date subject to change at our whim).

The solution is to use the Microsoft Graph PowerShell SDK to apply licenses. https://practical365.com/microsoft-365-license-graph-sdk/

Set-MsolUserLicense : You have exceeded the maximum number of allowable transactions. Please try again later.
At line:1 char:60
+ … | foreach {Set-MsolUserLicense -UserPrincipalName $_.UserPrincipalNa …

There isn’t one yet. But that’s OK because Start-ADSyncSyncCycle doesn’t do anything with licenses, which is the first problem that people will run into. A replacement will come in due course.

The Microsoft documentation says (for using a password profile):

In delegated access, the calling app must be assigned the Directory.AccessAsUser.All delegated permission on behalf of the signed-in user. In application-only access, the calling app must be assigned the User.ReadWrite.All application permission and at least the User Administrator Azure AD role.

Are you doing this interactively or using a program (delegated or application)? That might account for the difference.

I think that Directory.ReadWrite.All is a better permission to uss. Directory.AccessAsUser.All is accessing the directory as a user and you’d imagine that the Directory.ReadWrite.All is more appropriate because it’s an admin activity. https://graphpermissions.merill.net/permission/Directory.AccessAsUser.All. In any case, you have a solution…

Never mind I found it needed this as well:
Directory.AccessAsUser.All

What you sent didn’t work on PowerShell 5.1. But it led me to another article that worked:
https://learn.microsoft.com/en-us/graph/api/user-update?view=graph-rest-1.0&tabs=powershell#example-3-update-the-passwordprofile-of-a-user-to-reset-their-password

$PasswordProfile = @{
ForceChangePasswordNextSignIn = $false
Password = “riverD@0404”
}
Update-MgUser -UserId $UserId -PasswordProfile $PasswordProfile

Do you know why this worked better? I’m getting a permission error and the scopes I have should provide everything. User.ManageIdentities.All, User.EnableDisableAccount.All, User.ReadWrite.All, Directory.ReadWrite.All

Not sure how to get the permissions to test this.

Sure. Use the setting in the password profile used as the input to the Update-MgUser cmdlet to avoid resetting the password.

$NewPassword[“Password”]= “!NewYorkCity2022?”
$NewPassword[“ForceChangePasswordNextSignIn”] = $false
Update-MgUser -UserId $UserId -PasswordProfile $NewPassword

For more details on the password profile see https://learn.microsoft.com/en-us/graph/api/resources/passwordprofile?view=graph-rest-1.0