POST Timesheets returns 403 with Access denied

Q&A
1

Request at 2025-02-17 17:34:22.158Z :

POST https://api.letsdeel.com/rest/v2/timesheets

{"data": {"contract_id": "REDACTED", "description": "Some", "date_submitted": "2025-02-15", "quantity": 72.60637447722222}}

Response:

{"request": {"method": "POST", "url": "/hourly_reports", "status": 403, "api_req_id": "a663f2891e32bd561b92509093f03f74", "docs": "no match", "source": "http"}, "errors": {"errors": [{"message": "Access denied"}]}}
2

Hello @alexg, sorry for the late response. I’ve checked the logs of your requests and found that you are trying to create a timesheet with the client role. Unfortunately, timesheet creation is only available for Organization Admins.

3

@Dmytro_Deel What should user do? Should they re-establish OAuth authorization with Deel using different account (with admin role)?

4

Hello @alexg , yes correct with organization admin role

5

Thank you!
Is there a way to get the role of the user who is granting access during OAuth grant? E.g. role token claims and extra parameters in the callback?

6

Hello @alexg, Apologies for delayed response.
Passing Role claims and extra parameters are not supported in the callback.

1 Like