Return 403 for insufficient role

http

HTTP/1.1 403 Forbidden

Explanation

Use 403 when the user is known but does not have the right scope, role, or entitlement.

Learn the surrounding workflow

Compare similar commands or jump into common fixes when this command is part of a bigger troubleshooting path.

Same sheet · prioritizing Authentication patterns

Send an OAuth or JWT access token.

Open In sheethttpsame section

Send a static API key in a header.

Open In sheethttpsame section

Keep credentials out of path and query strings.

Open In sheettextsame section

Explicit major version in the URL.

Open In sheethttp1 tag match

Negotiate version with the Accept header.

Open In sheethttp1 tag match

Pin behavior by release date.

Open In sheethttp1 tag match