Insufficient Permissions

At a glance

What it means

The caller is authenticated but not authorized for the requested resource or action — whether by role/scope, ownership, or a system-level rule.

When it is returned

• The API user lacks the role or scope required by the endpoint.
• The request targets a resource owned by another company.
• The action is gated by a feature flag, contract setting, or compliance constraint.
• The target resource is system-managed and the requested action is disallowed (e.g., editing a default task).

Troubleshooting

• Confirm the API user's role with your Field Nation administrator.
• Verify the resource belongs to the calling company.
• Review the endpoint's documented constraints for system-managed resources.
• If a missing entitlement is suspected, contact Field Nation support.

Example response

HTTP/1.1 403 Insufficient Permissions
Content-Type: application/problem+json

{
  "type": "https://developer.fieldnation.com/error-codes/insufficient-permissions",
  "title": "Insufficient Permissions",
  "status": 403,
  "detail": "The authenticated user does not have permission to publish work orders.",
  "code": "INSUFFICIENT_PERMISSIONS",
  "retryable": false,
  "correlationId": "01J9X7Q3F6E2K8B1Z5C4M0V2HA",
  "agent": {
    "action": "ESCALATE"
  },
  "errors": []
}

Related

• API Error Codes catalog
• RFC 9457 — Problem Details for HTTP APIs