Here is the 403 Response:
{status: "USER_UNAUTHORIZED", message: "user does not have permissions to authorize scopes",…}
correlationId: "7dc18e95-e060-4807-bc84-eff95b80b0ec"
message: "user does not have permissions to authorize scopes"
requestId: "1662a17627c11be7b2cc1f6dc1c3a4bd"
status: "USER_UNAUTHORIZED"
I have read through many forum posts and many are similar, but none of them have a solution. I've checked the user permissions and the user in question is an Admin with publish/read/write access to all content types. The integration needs access to Contacts, Forms and Content. I know the issue is with Content because when I take the content scope off the authentication works, but the integration doesn't function fully because it needs the content.
That does seem strange to me. I would expect Jim to be able to connect your integration, given those permissions and the subscription level of the account.
Would you mind sharing:
Your app ID
The authorization URL you are using (with the scopes)
And this has worked in other portals and other accounts and with a different user in this same portal that has the exact same permissions. It is odd that it is not working for this user and we need it to work for this specific user.
The easiest way to resolve this is to have a Super Admin connect the app.
If that's not an option, though, would you share a link to the account's user management page below and identify the first three letters of the user's name (no need to give the full name)?