# FORBIDDEN

Canonical page: https://docs.ovok.com/errors/forbidden

**HTTP 403.** Problem type: [`https://docs.ovok.com/errors/forbidden`](https://docs.ovok.com/errors/forbidden).

## What this means [#what-this-means]

The request was authenticated, but the caller is not allowed to perform this operation on the requested resource or in the current project context.

## Troubleshooting [#troubleshooting]

Check which user or service identity made the request and confirm that the client selected the intended project and environment. Ask an administrator to verify the caller's role, project membership, and permission for this operation and resource. A valid sign-in does not by itself grant access to every project or action.

## Retry safely [#retry-safely]

Retry only after using the correct identity or after an administrator changes the relevant access. Repeating the request with the same identity and permissions will not help; do not send credentials when asking for access support.

## If the problem persists [#if-the-problem-persists]

Share the HTTP status, problem `type`, request path, response timestamp, and `traceId` with your administrator or support contact. Do not include access tokens or sensitive patient data. The [Error responses guide](/errors) explains the response fields and field-level errors.