Organization API: code 403 "Crm_Implied_Api_Access" error for "https://www.zohoapis.com/crm/v2/org"

Organization API: code 403 "Crm_Implied_Api_Access" error for "https://www.zohoapis.com/crm/v2/org"

Hello. I've developed an add-on that allows clients to synchronize data from Zoho CRM with the Google Spreadsheet. I am using the OAUTH2 protocol, so clients will have to authenticate into their Zoho account, and Zoho will send back to the app an access token which will be used to get data.

Currently, there are about 100 clients, and everything works smoothly.

Today I've found that a guy who could become a new client was not able to to get his organization data, because the application receiving for the GET request "https://www.zohoapis.com/crm/v2/org" the following HTTP_ERROR with code 403 and details: 


  1. {
  2.     "code": "NO_PERMISSION",
  3.     "details": {
  4.         "permissions": ["Crm_Implied_Api_Access"]
  5.     },
  6.     "message": "permission denied",
  7.     "status": "error"
  8. }

And I've seen in the logs he was able to authenticate successfully and had a valid access token (I do not log tokens, of course, but will log the result of the authentication).


I've studied the API doc and have not found anything about this error.

So I assume this may be on the client's side. I do not want to lose potential clients, so I want to ask the Zoho team, what's wrong with this guy's access and if there is a way for me to serve him?