Where does the API token scope "view:team:teams" come from?

[Chris Dunn]

Hi,

First time poster here.

I'm working with the Jira REST API's and have created an API token for the Jira App and set the appropriate scopes to create, update and view issues etc.  

Now, I want to update an issue's team and so I need the team id, however, there is no REST API within Jira to get this information, and I believe I need to use other Atlassian APIs, such as the Atlassian Teams Public REST API or the GraphQL API.

The problem is that regardless which API I use, my API token doesn't seem to have the correct permission, and no matter which scope I use I either get a failed response with "Unauthorized; scope does not match" or "requiredScopes": [ "view:team:teams" ].

I'm assuming I need the scope "view:team:teams" but I can't for the life of me figure out how to create an API token with this.  When I go to create an API token the only App I can select is Jira, so is there another App for this? and where can I get it?

Has anyone solved this problem? I haven't found any documentation on the permissions required to use these APIs.

If someone has solved this, do you know if a single token can be used for both the Jira and Atlassian REST API's? or do I need a separate one?

Thanks in advance

[marc -Collabello--Phase Locked- · Accepted solution]

If you use Basic Auth with a token scoped to your account, that token can deo everything you can do.

Only when you build a Jira app with e.g. Forge you need to make sure that the Forge app has the required scopes.

So, where did you get the token from?

[Chris Dunn]

I am creating tokens using https://id.atlassian.com/manage-profile/security/api-tokens.

When I create an API token then yes it has all the permissions that I as a user have, but when I try to create "an API token with scopes", I can't figure out how to create one with the scope "view:team:teams".

I'm assuming then the only way to get an API token with this scope is to create an OAuth or Forge app as you suggest?

Many thanks for your response!

[marc -Collabello--Phase Locked-]

Indeed, token with specific scopes are either OAuth or Forge.

However the API documentation should list how an endpoint is accessible . The Teams REST API should be accessible by your token.

On trick to test for your access to the API is to paste the URL into your browser and see if your account has access.

As far as I know, you can access the GraphQL API from your browser, however not through Basic Auth.

[Chris Dunn]

Ok great.  Thanks for clarifying and helping me.