Roles and Permissions
Reading needs membership, writing needs editor, team changes need admin.
Reading requires membership of the site. Writing requires the editor role. A few operations require admin.
| Role | Read | Write | Manage the team |
|---|---|---|---|
| reader | yes | no | no |
| editor | yes | yes | no |
| admin | yes | yes | yes |
Every unsafe method -- POST, PATCH, PUT, DELETE -- is editor-gated automatically, so a reader token can explore the whole API without any risk of changing something.
Admin only
- Adding a team member to a site, or changing someone's role.
A 403 means the endpoint worked and your role did not. Check which role you hold on that site before assuming the call is wrong.