forbidden

HTTP status: 403 Forbidden

The token is valid but not allowed to perform this action.

Common causes

• The token’s role is below what the action requires (e.g. a Viewer attempting a write).
• A Service Token acting outside its granted permissions.

How to fix

Use a token with a sufficient role, or adjust the token’s role in the dashboard. Inspect a resource’s _actions block to see which operations your token may perform.

Example

{
  "error": "forbidden",
  "message": "This action requires the Member role.",
  "docs_url": "https://featureflip.io/docs/management-api/errors/forbidden"
}