az ad app update permissions update failing for an old app

[roberAlb]

Describe the bug
I'm using this command to update an Azure AD app permissions, but it is just working for new created apps, we have some apps that were created in the past and when a new permission is added or removed from RequiredResoures.json it is failing with the error "az : ERROR: Property requiredResourceAccess.resourceAccess is invalid.". However, it works for new created Azure AD apps.

az ad app update --id xxxxxxxxxx
--required-resource-accesses "xxxx/RequiredResources.json" `
--app-roles "xxxxx/AppRoles.json"

To Reproduce

Use this command with old created Azure AD apps to update permissions.

az ad app update --id xxxxxxxxxx
--required-resource-accesses "xxxx/RequiredResources.json" `
--app-roles "xxxxx/AppRoles.json"

Expected behavior
The permissions should be updated according to the configuration of the JSON for the permissions.

Environment summary
I'm using azure cli 2.32.0

[yonzhan]

Jiashuo Li (@jiasli) for awareness

[microsoft-github-policy-service]

🔔 Routing this issue to @act-identity-squad.

[MaddyMicrosoft]

The error Property requiredResourceAccess.resourceAccess is invalid came from the retired Azure AD Graph serialization layer. az ad was migrated to Microsoft Graph in 2.37.0 and no longer uses that client or that validation, so az ad app update --required-resource-accesses sends the manifest to Microsoft Graph directly. Please upgrade and retry against the old application. If the update still fails on a current CLI, please open a fresh issue with the exact JSON and --debug output.