ai-automation-consultant / Failure Lab

n8n Credential Wrong Scope

A workflow authenticates but fails when it reaches a protected CRM action.

Category

n8n

Difficulty

standard

Last Run

none

Incident Brief

Diagnose why the n8n CRM node can read leads but cannot update them.

Broken State

The n8n credential uses a read-only CRM token even though the workflow now updates lead status.

Symptoms

  • List and get operations succeed.
  • Update lead operations return forbidden.

Trace

n8n.node=CRM Update status=403 scope=read:leads
required_scope=write:leads granted_scope=read:leads

Diagnosis