What it means
The API answered with HTTP 403 and the error code forbidden.
The token lacks the scope this operation needs, or its creator’s role in the workspace is not enough.
How to handle it
Every error is an RFC 9457 problem document (application/problem+json). Match on code, never on the message text. See errors for the full list.