Search user by search_term issue

[lang1]

Whenever I turned on the Enforce Scopes of a Dev key, I'm unable to use the function to search user by search_term. I even enabled all scopes and still get error "Insufficient scopes on access token"

/api/v1/accounts/self/users?search_term=:search_key&include[]=email

Am I missing something here?

Thanks.

[chriscas]

Hi @lang1,

When you setup your developer key, did you enable the "Allow Include Parameters" option, as shown in the How do I enable scoping for a developer API key in... - Instructure Community - 181 (canvaslms.com) guide?  Since you're using an include in your API call, I believe you'll need to have that option enabled for the scoped key.

-Chris

-Chris

[lang1]

Hello @chriscas 
I enabled "Allow Include Parameters" in side the Dev key settings page and still get the same error "Insufficient scopes on access token". The below scopes are the enabled ones.

1. OAUTH 2 -> a.    User Info -> /auth/userinfo 
2. Get available Scopes ->  GET|/api/v1/accounts/:account_id/scopes 
3. Accounts API ->   Get a single account -> GET /api/v1/accounts/:id   
4. Get all accounts -> GET /api/v1/accounts/  
5. Get sub accounts GET /api/v1/accounts/:account_id/sub_accounts 
6. Get all courses -> GET /api/v1/accounts/:account_id/courses  
7. Get Auth Provider -> GET /api/v1/accounts/:account_id/authentication_providers 
8. Get user profile -> GET /api/v1/users/:user_id/profile 
9. Get user GET /api/v1/users/:id
10. Create a user -> POST /api/v1/accounts/:account_id/users 
11. Create user login -> POST /api/v1/accounts/:account_id/logins 
12. Update user Login -> PUT /api/v1/accounts/:account_id/logins/:id 
13. View user logins -> GET /api/v1/users/:user_id/logins 
14. Update user profile -> PUT /api/v1/users/:id
15. Enroll a user -> POST /api/v1/courses/:course_id/enrollments  
16. Enroll a user to section -> POST /api/v1/sections/:section_id/enrollments 
17. Delete an enrollment -> DELETE /api/v1/courses/:course_id/enrollments/:id  
18. View course enrollments -> GET /api/v1/courses/:course_id/enrollments 
19. View section enrollment -> GET /api/v1/sections/:section_id/enrollments 
20. View individual enrollment -> GET /api/v1/users/:user_id/enrollments 
21. Create a new course -> POST /api/v1/accounts/:account_id/courses  
22. View Course -> GET /api/v1/courses/:id 
23. View Course by Account -> GET /api/v1/accounts/:account_id/courses/:id 
24. Update Course -> PUT /api/v1/courses/:id 
25. View section list -> GET /api/v1/courses/:course_id/sections 
26. View section info -> GET /api/v1/courses/:course_id/sections/:id 
27. Create a WebHook Sub ->  POST|/api/lti/subscriptions 
28. View Subscription -> GET|/api/lti/subscriptions/:id 
29. Delete subscription -> DELETE|/api/lti/subscriptions/:id 

Any thought? Thanks

[chriscas · Accepted solution]

Hi @lang1,

You don't appear to have the scope for the exact API call you're performing enabled.  You need "
url:GET|/api/v1/accounts/:account_id/users" to be enabled under the users area.

Hope that fixes up the issue!

-Chris

[lang1]

Thank you. It works now.