Insufficient access error when creating or updating data views with the Customer Journey Analytics Data views API
When you call the Customer Journey Analytics (CJA) Data views API to create or update a data view, requests can fail with an insufficient access error even though your integration credentials are valid. This article explains why that happens for API projects that use a technical account, and how to grant that technical account the same product administrator access that an interactive user needs to manage data views.
Description description
Environment
- Customer Journey Analytics
- CJA Data views API (for example, POST or PUT operations that create or update a data view)
Issue/Symptoms
When you send a POST or PUT request to the CJA Data views API, the API returns an error similar to the following:
- Error code:
insufficient_access - Error description: Only IMS product admins can update/delete/create Dataview
The failure occurs even when the OAuth client and project in Adobe Developer Console are set up correctly, because the identity that calls the API is often a technical account rather than a named user.
Resolution resolution
Grant the technical account Customer Journey Analytics product administrator access:
-
In Adobe Developer Console, open the project that contains the OAuth credential used for CJA API calls.
-
Locate the Technical Account Email for that credential or integration.
Note: Use the Technical Account Email, not the Technical Account ID. Both values use an
@techacct.adobe.comaddress, but the Technical Account Email typically looks like several groups of letters and numbers separated by hyphens, in the formxx-x-x-x-xx@techacct.adobe.com(pattern and length can vary). -
Sign in to the Adobe Admin Console as an administrator who can assign product roles.
-
Assign Customer Journey Analytics product administrator (or equivalent product admin role for Customer Journey Analytics in your organization) to that Technical Account Email, the same way you would assign the role to a person’s email address.
-
Retry the Data views API POST or PUT request after the role change has propagated (wait a few minutes if the error persists).
If access still fails after the role assignment, confirm that you used the technical account email from Developer Console, that the role is applied in the correct Adobe organization, and that no separate API or sandbox restrictions apply in your environment.