ai-automation-consultant / Failure Lab

CRM 403 Missing Scope

Reads still work, but writes fail after a least-privilege credential change.

Failure LabDashboard

Category

api-auth

Difficulty

standard

Last Run

none

Incident Brief

Diagnose the authorization failure without asking for broader access than needed.

Broken State

The OAuth app has read:leads but lost write:leads.

Symptoms

  • Lead lookups succeed.
  • Lead creation and updates return 403.

Trace

oauth.scopes=read:leads
crm.upsert status=403 error=insufficient_scope required=write:leads

Diagnosis