com.atlassian.confluence.api.service.exceptions.PermissionException: User not permitted to view user

[Abhinay]

I am seeing below errors while making a call using oauth bearer token on api's 

1. /wiki/rest/api/group/{group-id}

2. /wiki/rest/api/group/{group-id}/membersByGroupId

Oauth app has below permissions to access the data.

1. read:content-details:confluence

2. read:user:confluence

3. read:confluence-user

4. read:confluence-groups

5. read:group:confluence

6. read:user.property:confluence

Am I missing any required permission?

Errors are: 

{"statusCode":403,"data":{"authorized":false,"valid":true,"errors":[],"successful":false},"message":"com.atlassian.confluence.api.service.exceptions.PermissionException: User not permitted to view user profiles"}

{"statusCode":403,"data":{"authorized":false,"valid":true,"errors":[],"successful":false},"message":"com.atlassian.confluence.api.service.exceptions.PermissionException: Not allowed to search for groups"}

[Luis Pellacani [Atlassian Support]]

Hey @Abhinay ,

Welcome to Atlassian Community.

Based on our documentation for both options, you already have the correct permissions granted. Since you are receiving errors when specifying a user group ID, can you try to request all users without an ID (/wiki/rest/api/group)?

In case that request returns the same 403 error further investigation will be required by our Developer Support team. You can reach them on the channel below:

• Developer Support

Cheers,

Luis Pellacani

[Shawn Doyle - ReleaseTEAM]

I'd check to see if the token works for any API call.  You are not getting authorized. 

[Abhinay]

The other api calls such as listing spaces, listing pages, and blogs, content of page etc are working just fine with Bearer token.