HTTP status codes / 4xx — Client error
403 Forbidden
What it means
The server knows who you are and the answer is no. Authentication succeeded (or is irrelevant); permission is denied.
What causes it
Insufficient role/scope, IP or geo blocks, WAF rules, hotlink protection, filesystem permissions on the server.
How to fix it
Verify the account actually has the permission or API scope. If it is a WAF/geo block, the request pattern or origin is the trigger. Server-side: check file ownership and directory permissions.