Getting 403 Error when calling GET /teams and GET /rooms

[rcjchang]

I'm currently getting a 403 error when attempting to call the following endpoints, even though I think I have the correct scopes:

GET https://webexapis.com/v1/teams 

GET https://webexapis.com/v1/rooms

The error response looks like this

403 
{ 
    "message": "The server understood the request, but refused to fulfill it because the access token is missing required scopes or the user is missing required roles or licenses.", 
    "errors": [
        { 
            "description": "The server understood the request, but refused to fulfill it because the access token is missing required scopes or the user is missing required roles or licenses." 
        } 
    ], 
    "trackingId": "ROUTERGW_296cf303-850c-494b-aa6b-1c656b855597" 
}

Currently the request token has the following scopes:

"spark-compliance:memberships_read"
"spark-admin:roles_read"
"spark-admin:organizations_read"
"spark-compliance:events_read"
"spark-compliance:rooms_read"
"spark-compliance:team_memberships_read"
"spark-compliance:messages_write"
"audit:events_read"
"spark-compliance:teams_read"
"spark-admin:licenses_read"
"spark-compliance:messages_read"
"spark-admin:people_read"

 Is there something I'm missing?

[dtibbe · Accepted solution]

You're requesting admin and compliance level scopes. Most likely your user does not have those roles assigned in control hub.

Depending on your use case, scopes like spark:rooms_read or spark:teams_read (see also https://developer.webex.com/docs/api/guides/integrations-and-authorization) might be sufficient 

[rcjchang]

Thanks! Adding the spark:rooms_read and spark:teams_read scopes worked. The user does have admin + compliance admin roles, but I guess the endpoint requires other scopes instead.