# grant_not_allowed

**HTTP status:** 403 (Forbidden)

**Title:** Grant not allowed

## Cause

A key can only hand out scopes it has itself, and some scopes (the `subaccounts:*` ones) are never handed down. The request asked for a scope the creating key cannot grant.

## How to fix it

Ask for fewer scopes: only scopes the creating key has, and never a `subaccounts:*` scope.

Set the parameter named below and send the request again.

Parameter: `scopes`

Every error carries `requestId` and the `Request-Id` header. Send it when you write to support.

[All error codes](/errors)