Not enough permissions to access: GET /fieldsOfStudy - linkedin

I'm trying to call LinkedIn V2 API to call a specific API which is:
GET https://api.linkedin.com/v2/fieldsOfStudy
So I followed the following tutorial to create an application, linked it with my account on LinkedIn and verify it.
Everything worked fine and I have an Access Token.
But I'm always having the following response:
{
"serviceErrorCode": 100,
"message": "Not enough permissions to access: GET /fieldsOfStudy",
"status": 403
}
And here are the permissions in my app:
OAuth 2.0 scopes
Permissions your app can request from users
r_emailaddress
r_liteprofile
w_member_social

Related

permissions to access linkedin's users profile

I have tried to access #linkedIn's users profile using the links-https://api.linkedin.com/v2/me?projection=(id,firstName,lastName) and https://api.linkedin.com/v2/me both but got the error-
{
"serviceErrorCode": 100,
"message": "Not enough permissions to access: GET /me",
"status": 403
}
I have client id, secret id and able to generate authorization code and access token using the Apis for that I am following this doc- https://learn.microsoft.com/en-us/linkedin/shared/authentication/authorization-code-flow?view=li-lms-2022-08&tabs=HTTPS for step4, I am unable to access #linkedIn's users profile.
If need permissions, please #linkedIn community give me the same and for further contact, DM me on this email-id - vkg6614#gmail.com . I want to access the users profile for https://upskilltalent.com/ this company
for better understanding please go through this doc--
https://learn.microsoft.com/en-us/linkedin/shared/authentication/authorization-code-flow?view=li-lms-2022-08&tabs=HTTPS
Thanks in advance
You probably need to look at https://learn.microsoft.com/en-us/linkedin/shared/integrations/people/profile-api?context=linkedin%2Fmarketing%2Fcontext&view=li-lms-2022-08
I would assume you're not requesting enough scopes when requesting the access token from LinkedIn.
You probably need r_basicprofile or r_liteprofile

Access API using Service Account

Does the Smart Device Management API support access using a Service Account? If so what's the magic combo?
I can access the API using registered OAuth2, and get valid device list response.
When using Service Account credentials to access the device list API I get:
{
"error": {
"code": 404,
"message": "Enterprise enterprises/{project-id} not found.",
"status": "NOT_FOUND"
}
}
I think the problem is that google have chosen to cut off the "home project" user. They seem to only support oauth2 auth and if you want to use it you have to get your app certified, otherwise they revoke the refresh token after 7 days. If the refresh token didn't get revoked every 7 days then I'd be happy with oauth2 offline auth. Come on google, support the home hobbyists!

Linkedin API `/organizationalEntityAcls` returns "message":"Not enough permissions to access: GET-roleAssignee /organizationalEntityAcls"

I am working on Linkedin API Integration V2 & trying to get all companies/organization of an authenticated account but i got this error
{ StatusCodeError: 403 - {"serviceErrorCode":100,"message":"Not enough permissions to access: GET-roleAssignee /organizationalEntityAcls","status":403}
Although my app has permission [rw_organization_admin]
It's necessary to add the rw_organization_admin scope, and also trough the LinkedIn Developer portal adding to your app the product: "Marketing Developer Platform", that is the one containing the endpoint: /v2/organizationAcls. To add the "Marketing Developer Platform" product, LinkedIn will ask you to compile a form, and than they will accept or refuse your request.

HTTPError: 403 Client Error: Forbidden for url: https://api.linkedin.com/v2/organizationalEntityAcls?q=roleAssignee

I'm running into this error when trying to hit any of the Organizations Lookup API endpoints:
HTTPError: 403 Client Error: Forbidden for url: https://api.linkedin.com/v2/organizationalEntityAcls?q=roleAssignee
I also run into this error for the Organization Search API. Which is strange because my "Usage and Limits" console says that these requests were successful. I've tried emailing LMSdeveloperteam#linkedin.com about this error but have gotten no response back.
Here is the permissions my app currently has: permissions
And here is my "Usage and Limits" screen: requests console
There are a number of v2 endpoints that I am able to access successfully and we already have API access so I'm drawing a blank on what else to do other than continue to email LMSdeveloperteam#linkedin.com and post here.
Does anyone have any ideas? LinkedIn support could you look into this please?
can you verify that you have an ADMINISTRATOR account in atleast one organization ?
Depending on your application's permissions, some Organization API
requests may require the authenticated member have a specific
organization role type, such as ADMINISTRATOR. You may lookup access
control information either by member or organizational entity.
could you also try if you have another api call from organization to look if you have access to the organization api ?
https://api.linkedin.com/v2/organizations/{organization ID}

Accessing a Google Domain's Google Groups from a service account - Keep getting 403 unauthorized

I'm trying to get a list of groups for a domain in Google Api (https://developers.google.com/admin-sdk/directory/v1/reference/groups/list).
I'm using "domain wide delegation", and have a service account from which the web app makes all its requests to Google.
The admin-sdk requires the requesting user to be an administrator, so i'm impersonating a admin user on the given domain.
This works fine with (https://developers.google.com/admin-sdk/directory/v1/reference/users/get), but when I'm trying to use the group api, it fails like this:
{
"error": {
"errors": [
{
"domain": "global",
"reason": "forbidden",
"message": "Not Authorized to access this resource/api"
}
],
"code": 403,
"message": "Not Authorized to access this resource/api"
}
}
I have checked the the permissions from the domain administrator have been delegated to the service account. And I have also checked that i can access the list of groups, while being logged in as the domain administrator.
Any help or hints is highly appreciated.
Thanks in advance
You will need to add the scope for reading groups.
First, make sure that you properly followed the steps here in this documentation including this steps on how to Instantiate an Admin SDK Directory service object.
It is important because this one shows you how to make API requests using OAuth 2.0 and your service account's credentials to perform Google Apps Domain-wide delegation.
For more information, check these related SO questions:
Google_Service_Directory - (403) Not Authorized to access this resource/api
Received error “Not Authorized to access this resource/api” when trying to use Google Directory API and Service Account Authentication

Resources