Skip to main content
Solved

Unable to locate ReadCompanyCallLog permission


Hello there,

I’m working on a PoC to ingest RC’s call history into our data lake. I’m using the Python SDK and using an admin’s JWT to authenticate. To do that, I’m trying to call the endpoint `/restapi/v1.0/account/~/call-log` as per documentation and several questions in this forum. However, this returns the following error:

HTTP 403 {
  "errorCode" : "InsufficientPermissions",
  "message" : "In order to call this API endpoint, one of the following permissions [ReadCompanyCallLog] have to be granted to the authorized user.",
  "errors" : [ {
    "errorCode" : "CMN-408",
    "message" : "In order to call this API endpoint, one of the following permissions [ReadCompanyCallLog] have to be granted to the authorized user.",
    "permissionsName" : "ReadCompanyCallLog"
  } ],
  "permissionsName" : "ReadCompanyCallLog"
}

I tried to find this permission but could not find it under Application Scopes (which is the place where the similar permission “ReadCallLog” was found).

  1. Is this the correct place to look for this permission? 
  2. I have read this question mentioning that the user must have access to such permission as well. How can I double-check and make sure that user generating the JWT is the admin/super-admin or have such privileges? (Note: I don’t have access to the supposed admin account that generated this JWT of mine since this is managed by the IT team from my company and I’m just the dev.) 
  3. Is there any other configuration at the APP level our Account level that might be needed as well?

Best answer by PhongVu

The missing permission is not an app scope. It’s the user permission. You wrote that the JWT token is from an admin user. But I doubt that is a super admin or a custom admin role which includes the user permission.

Login your RingCentral admin portal (with a super admin user), select the user who owns that JWT token and check that user role to see if the role includes these permissions.

 

 

View original
Did this thread help you find an answer to your question?

2 replies

PhongVu
Community Manager
Forum|alt.badge.img
  • Community Manager
  • 2424 replies
  • Answer
  • July 7, 2025

The missing permission is not an app scope. It’s the user permission. You wrote that the JWT token is from an admin user. But I doubt that is a super admin or a custom admin role which includes the user permission.

Login your RingCentral admin portal (with a super admin user), select the user who owns that JWT token and check that user role to see if the role includes these permissions.

 

 


  • Author
  • New Participant
  • 1 reply
  • July 8, 2025

Hello, this worked! Thank you very much!


Reply


Cookie policy

We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

 
Cookie settings