Organization API: code 403 "Crm_Implied_Api_Access" error for "https://www.zohoapis.com/crm/v2/org"

Organization API: code 403 "Crm_Implied_Api_Access" error for "https://www.zohoapis.com/crm/v2/org"

Hello. I've developed an add-on that allows clients to synchronize data from Zoho CRM with the Google Spreadsheet. I am using the OAUTH2 protocol, so clients will have to authenticate into their Zoho account, and Zoho will send back to the app an access token which will be used to get data.

Currently, there are about 100 clients, and everything works smoothly.

Today I've found that a guy who could become a new client was not able to to get his organization data, because the application receiving for the GET request "https://www.zohoapis.com/crm/v2/org" the following HTTP_ERROR with code 403 and details: 


  1. {
  2.     "code": "NO_PERMISSION",
  3.     "details": {
  4.         "permissions": ["Crm_Implied_Api_Access"]
  5.     },
  6.     "message": "permission denied",
  7.     "status": "error"
  8. }

And I've seen in the logs he was able to authenticate successfully and had a valid access token (I do not log tokens, of course, but will log the result of the authentication).


I've studied the API doc and have not found anything about this error.

So I assume this may be on the client's side. I do not want to lose potential clients, so I want to ask the Zoho team, what's wrong with this guy's access and if there is a way for me to serve him?

    • Sticky Posts

    • Kaizen #197: Frequently Asked Questions on GraphQL APIs

      🎊 Nearing 200th Kaizen Post – We want to hear from you! Do you have any questions, suggestions, or topics you would like us to cover in future posts? Your insights and suggestions help us shape future content and make this series better for everyone.
    • Kaizen #198: Using Client Script for Custom Validation in Blueprint

      Nearing 200th Kaizen Post – 1 More to the Big Two-Oh-Oh! Do you have any questions, suggestions, or topics you would like us to cover in future posts? Your insights and suggestions help us shape future content and make this series better for everyone.
    • Celebrating 200 posts of Kaizen! Share your ideas for the milestone post

      Hello Developers, We launched the Kaizen series in 2019 to share helpful content to support your Zoho CRM development journey. Staying true to its spirit—Kaizen Series: Continuous Improvement for Developer Experience—we've shared everything from FAQs
    • Kaizen #193: Creating different fields in Zoho CRM through API

      🎊 Nearing 200th Kaizen Post – We want to hear from you! Do you have any questions, suggestions, or topics you would like us to cover in future posts? Your insights and suggestions help us shape future content and make this series better for everyone.
    • Client Script | Update - Introducing Commands in Client Script!

      Have you ever wished you could trigger Client Script from contexts other than just the supported pages and events? Have you ever wanted to leverage the advantage of Client Script at your finger tip? Discover the power of Client Script - Commands! Commands