cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
238
Views
1
Helpful
9
Replies

OAuth2 scope error

I have an error for the call:

wireless - getOrganizationWirelessSsidsProfiles
Status403
Incorrect OAuth scopes. The required scopes are: []

If I try to call getOrganizationWirelessSsidsProfiles the endpoint returns 403 with error ncorrect OAuth scopes. The required scopes are: [] but required scopes are not listed.
9 Replies 9

The same for:

wireless - getOrganizationWirelessSsidsProfilesAssignments
Status403
Incorrect OAuth scopes. The required scopes are: []

Mark Elsen
Hall of Fame
Hall of Fame

 

 - @francesco.boscarino   What auth schemes are you using behind the SSID ?

 M.



-- ' Listen to the wind, it talks  
          Listen to the silence, it speaks
             Listen to your heart, it knows
Ganado Mucho (1809 to 1893 ) Navajo Indian

It is not a matter of auth schema (we have PSK and IPSK) but no defined profiles. If I use a static API key call succeed, it does not work with OAuth2

 

  - @francesco.boscarino         What kind of wireless environment are you using ?
                                                = Describe components, such as Meraki or 9800 controller based
                                                   and include the software version(s)

  M.



-- ' Listen to the wind, it talks  
          Listen to the silence, it speaks
             Listen to your heart, it knows
Ganado Mucho (1809 to 1893 ) Navajo Indian

We have only Meraki AP

 

             - @francesco.boscarino                Are you using recent meraki wireless firmware  ?

  M.



-- ' Listen to the wind, it talks  
          Listen to the silence, it speaks
             Listen to your heart, it knows
Ganado Mucho (1809 to 1893 ) Navajo Indian

Yes, latest. The issue is not related directly to wireless but to newest endpoints:

appliance - getOrganizationApplianceVpnSiteToSiteIpsecPeersSlas
Status403
Incorrect OAuth scopes. The required scopes are: []
wireless - getOrganizationWirelessSsidsProfiles
Status403
Incorrect OAuth scopes. The required scopes are: []
wireless - getOrganizationWirelessSsidsFirewallIsolationAllowlistEntries
Status403
Incorrect OAuth scopes. The required scopes are: []
organizations - getOrganizationSplashThemes
Status403
Incorrect OAuth scopes. The required scopes are: []
sm - getOrganizationSmAdminsRoles
Status403
Incorrect OAuth scopes. The required scopes are: []
organizations - getOrganizationDevicesCellularDataProfiles
Status403
Incorrect OAuth scopes. The required scopes are: []
insight - getOrganizationInsightMonitoredMediaServers
Status403
Incorrect OAuth scopes. The required scopes are: []
organizations - getOrganizationDevicesCellularDataProfilesAssignments
Status403
Incorrect OAuth scopes. The required scopes are: []
wireless - getOrganizationWirelessZigbeeDoorLocks
Status403
Incorrect OAuth scopes. The required scopes are: []
wireless - getOrganizationWirelessZigbeeDevices
Status403
Incorrect OAuth scopes. The required scopes are: []
appliance - getOrganizationApplianceFirewallMulticastForwardingByNetwork
Status400NetworkN_3692951694443807707
This endpoint is only available for networks on MX 19.1 or above.
appliance - getOrganizationApplianceUplinksNatByNetwork
Status403NetworkN_3692951694443807707
Incorrect OAuth scopes. The required scopes are: []
wireless - getNetworkWirelessElectronicShelfLabel
Status403NetworkN_3692951694443808826
Incorrect OAuth scopes. The required scopes are: []
wireless - getOrganizationWirelessRadioRrmByNetwork
Status403NetworkN_3692951694443808826
Incorrect OAuth scopes. The required scopes are: []
wireless - getOrganizationWirelessZigbeeByNetwork
Status403NetworkN_3692951694443808826
Incorrect OAuth scopes. The required scopes are: []
wireless - getOrganizationWirelessAirMarshalSettingsByNetwork
Status403NetworkN_3692951694443808826
Incorrect OAuth scopes. The required scopes are: []
appliance - getOrganizationApplianceUplinksNatByNetwork
Status403NetworkL_3692951694443809003
Incorrect OAuth scopes. The required scopes are: []
appliance - getOrganizationApplianceFirewallMulticastForwardingByNetwork
Status400NetworkL_3692951694443809003
This endpoint is only available for networks on MX 19.1 or above.
appliance - getOrganizationApplianceFirewallMulticastForwardingByNetwork
Status400NetworkL_645703596574249316
This endpoint is only available for networks on MX 19.1 or above.
wireless - getNetworkWirelessElectronicShelfLabel
Status403NetworkL_3692951694443809003
Incorrect OAuth scopes. The required scopes are: []
wireless - getOrganizationWirelessRadioRrmByNetwork
Status403NetworkL_3692951694443809003
Incorrect OAuth scopes. The required scopes are: []
wireless - getNetworkWirelessElectronicShelfLabel
Status403NetworkN_3692951694443836138
Incorrect OAuth scopes. The required scopes are: []
wireless - getOrganizationWirelessZigbeeByNetwork
Status403NetworkN_3692951694443836138
Incorrect OAuth scopes. The required scopes are: []
wireless - getOrganizationWirelessRadioRrmByNetwork
Status403NetworkN_3692951694443836138
Incorrect OAuth scopes. The required scopes are: []
appliance - getOrganizationApplianceUplinksNatByNetwork
Status403NetworkL_3692951694443810587
Incorrect OAuth scopes. The required scopes are: []
appliance - getOrganizationApplianceUplinksNatByNetwork
Status403NetworkN_3692951694443824881
Incorrect OAuth scopes. The required scopes are: []
appliance - getOrganizationApplianceFirewallMulticastForwardingByNetwork
Status400NetworkN_3692951694443824881
This endpoint is only available for networks on MX 19.1 or above.
wireless - getNetworkWirelessElectronicShelfLabel
Status403NetworkN_645703596574266164
Incorrect OAuth scopes. The required scopes are: []
wireless - getOrganizationWirelessZigbeeByNetwork
Status403NetworkN_645703596574266164
Incorrect OAuth scopes. The required scopes are: []
appliance - getOrganizationApplianceUplinksNatByNetwork
Status403NetworkN_645703596574269566
Incorrect OAuth scopes. The required scopes are: []
appliance - getOrganizationApplianceFirewallMulticastForwardingByNetwork
Status400NetworkN_645703596574269566
This endpoint is only available for networks on MX 19.1 or above.
wireless - getNetworkWirelessElectronicShelfLabel
Status403NetworkL_3692951694443810587
Incorrect OAuth scopes. The required scopes are: []
wireless - getOrganizationWirelessRadioRrmByNetwork
Status403NetworkL_3692951694443810587
Incorrect OAuth scopes. The required scopes are: []
wireless - getOrganizationWirelessZigbeeByNetwork
Status403NetworkL_3692951694443810587
Incorrect OAuth scopes. The required scopes are: []
wireless - getOrganizationWirelessAirMarshalSettingsByNetwork
Status403NetworkL_3692951694443810587
Incorrect OAuth scopes. The required scopes are: []
wireless - getOrganizationWirelessSsidsProfilesAssignments
Status403
Incorrect OAuth scopes. The required scopes are: []
appliance - getOrganizationApplianceUplinksNatByNetwork
Status403NetworkL_645703596574249316
Incorrect OAuth scopes. The required scopes are: []
wireless - getOrganizationWirelessAirMarshalSettingsByNetwork
Status403NetworkL_3692951694443809003
Incorrect OAuth scopes. The required scopes are: []
wireless - getOrganizationWirelessZigbeeByNetwork
Status403NetworkL_3692951694443809003
Incorrect OAuth scopes. The required scopes are: []
wireless - getOrganizationWirelessAirMarshalSettingsByNetwork
Status403NetworkN_3692951694443836138
Incorrect OAuth scopes. The required scopes are: []
wireless - getOrganizationWirelessAirMarshalSettingsByNetwork
Status403NetworkN_645703596574266164
Incorrect OAuth scopes. The required scopes are: []
wireless - getOrganizationWirelessRadioRrmByNetwork
Status403NetworkN_645703596574266164
Incorrect OAuth scopes. The required scopes are: []

ashok_boin
Level 10
Level 10

You might be hitting a bug in Meraki Dashboard API. 

When the required scopes array returns completely empty ([]), it means the Cisco Meraki wireless team has not yet mapped or assigned an explicit OAuth 2.0 access scope to the getOrganizationWirelessSsidsProfiles endpoint. Because no scope exists for it, the OAuth token validator denies your request by default.

Please raise a case with Meraki team.


With best regards...
Ashok

dashmark906
Community Member

That empty scopes array in the 403 is the tell — it usually means the API key was generated before those endpoints existed, so it carries no scopes at all rather than the wrong ones. I'd regenerate the API key and check the key's permission level, since older keys don't pick up new endpoint scopes automatically. If the new key still fails, the issue is on Cisco's side and worth raising with support with the exact endpoint names.

Review Cisco Networking for a $25 gift card