# What does the VARTA error `insufficient_scope` mean?

The caller is authenticated, but the credential is missing a scope this operation requires.


**HTTP status:** `403`  ·  **Type:** `permission_error`

## What it means

The caller is authenticated, but the credential is missing a scope this operation requires.

## What causes it

Raised when a scope check fails (`backend/app/security/deps.py`).

## What to do

Use a credential issued with the scope the operation requires.