Skip to main content

Hello Lucid Support Team,

I am currently developing an application and have requested the necessary scopes, including account.user:readonly, to access the List Users API (https://api.lucid.co/users). However, despite including the correct scopes and using a valid access token, I am receiving a 403 Forbidden error when attempting to call this endpoint.

Could you please assist me in understanding if there are additional permissions or approvals required for my app or account to access the List Users API? I want to ensure my app is correctly configured to use org-wide endpoints.

Here are some details for reference:

  • Organization Name: SSPM

  • Scopes Requested: account.user:readonly offline_access

Thank you for your support. I look forward to your guidance.

Hello Zypa,

 

Investigating now. Will be in touch soon.


I believe I know what is happening. The https://developer.lucid.co/reference/listusers endpoint is `account token` only.  However, the `account.user:readonly` scope is valid for for both `user` and `account` tokens. So, you can grant the request for a `user` token with that scope, but the `GET` request to LIST `/users` will reject it.

 

To call that endpoint, you will need to generate a `account token`. See endpointshttps://lucid.readme.io/reference/authentication-methods  and  https://developer.lucid.co/reference/authorization for more information.