Forbidden

Meaning

Authentication succeeded, but the caller lacks the required scope, organization role, or plan capability.

When it is returned

The API returns this problem after it identifies the caller and determines that the caller cannot access the requested operation or resource.

Client handling

Do not retry unchanged. Request the required permission, use credentials for an authorized principal, or remove the unsupported operation. The response detail can identify the missing capability.