See insufficient_scope in the errors guide.