Qlik Automate: Oauth Client with "automations.admin" scope, gets "403 insufficient permissions" when running automation in a Shared Space

Daniele_Purrone · Jul 2, 2025 5:12:29 AM

An OAuth client has admin.apps, admin.automations and admin.spaces scopes.

When using it with API calls to run automations in a shared space, the result is 403 insufficient permissions.

The assumption is that the admin scopes should be enough to execute the automation.

Explicitly add the OAuth client as a user on the tenant and give the user Can manage permissions.

add OAuth client as user with can manage permission.png

It is the same concept as a Tenant Admin.

A Tenant Admin can see everything, but to open apps in a space or reload them, the admin user must be explicitly added to the space.

The same concept applies to the OAuth admin scopes.