# Insufficient permissions

The KeenAuth APIs return this problem type with HTTP status 403 (Forbidden).

## Problem type

| Field | Value |
|---|---|
| Type URI | `https://docs.keenauth.com/errors/insufficient_permissions` |
| Code | `insufficient_permissions` |
| HTTP status | 403 Forbidden |
| Title | Insufficient permissions |

## Meaning

The key or role does not cover the operation; the `required_permissions` extension lists what is missing.

## Extension members

The response body carries these additional members:

- `required_permissions`

## Example response

Example response body. `detail` is a human-readable English description that is not meant for end users; `instance` identifies the request.

```json
{
  "type": "https://docs.keenauth.com/errors/insufficient_permissions",
  "title": "Insufficient permissions",
  "status": 403,
  "code": "insufficient_permissions",
  "detail": "...",
  "instance": "urn:idp:request:<request_id>",
  "required_permissions": "..."
}
```

All error codes: [Error reference](/docs/errors).