cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
391
Views
1
Helpful
3
Replies

What minimum permission require to read and write role, licenses?

Hi Team,
We configured the integration and selected below scopes

spark:people_read spark-admin:people_write spark-admin:roles_read identity:people_read spark-admin:licenses_read identity:people_rw spark-admin:people_read

But we received error as   

insufficient privileges detected. Status: 403, Output: {"message":"The server understood the request, but refused to fulfill it because the access token is missing required scopes or the user is missing required roles or licenses.","errors":[{"description":"The server understood the request, but refused to fulfill it because the access token is missing required scopes or the user is missing required roles or licenses."}],"trackingId":"ROUTERGW_820fd30f-de50-4c35-9fd5-19f0fd05e06f"}

Please let us know, what minimum permission require to read and write role?
Also, same for licenses, what minimum permission require to read and write?

Thanks,
Prashant

3 Replies 3

@dtibbe User have admin role. Also integration have the below scopes

spark:people_read spark-admin:people_write spark-admin:roles_read identity:people_read spark-admin:licenses_read identity:people_rw spark-admin:people_read

spark-admin:roles_read to list roles using https://developer.webex.com/docs/api/v1/roles.
spark-admin:licenses_read to list licenses using https://developer.webex.com/docs/api/v1/licenses/list-licenses.
spark-admin:people_write to update user's licenses using either  https://developer.webex.com/docs/api/v1/licenses/assign-licenses-to-users or https://developer.webex.com/docs/api/v1/people/update-a-person and to update their roles using https://developer.webex.com/docs/api/v1/people/update-a-person. You may also need to addspark-admin:people_read scope so you can actually read the user's response details when trying to update them.

dtibbe
VIP Alumni
VIP Alumni

Does the user also have an admin role? The integration must request those scopes on the one hand but the user must be able to fulfill then on the other.