LinkedIn APIs — unauthorized_scope_error

If you run into this error: unauthorized_scope_error when trying to call certain LinkedIn APIs, here is a reference of which permissions you can use and cannot use with LinkedIn when you first create an application through https://www.linkedin.com/developers/

APIs using Authorization Code Flow (3-legged OAuth)

All APIs using Client Credential Flow (2-legged OAuth) are not available for use through the LinkedIn Developer Portal initially. You will need to go through certain Partner Programs to obtain access.

You will need to enable Sign in with LinkedIn Product to have the user grant permission to your application.

r_liteprofile — Required to retrieve name and photo for the authenticated user.

r_emailaddress — Retrieve primary email address on the authenticated user’s behalf.

w_member_social — Post, comment and like posts on behalf of an authenticated member. (Need to enable Share on LinkedIn)

Here are permissions that are not available publicly (although it is documented in the public LinkedIn developer document site).

r_basicprofile — Required to retrieve name, photo, headline, and vanity name for the authenticated user

r_compliance — Required to retrieve activities for compliance monitoring and archiving

w_compliance — Required to manage and delete data for compliance

r_primarycontact — Retrieve primary authenticated member handles (email or phone number) on the authenticated user’s behalf.

r_1st_connections — Required to retrieve 1st-degree connections

r_compliance — Required to retrieve your activity for compliance monitoring and archiving

w_organization_social — Post, comment and like posts on behalf of an organization.

r_organization_social — Retrieve organizations’ posts, comments, and likes.

r_member_social — Retrieve posts, comments, and likes on behalf of an authenticated member.

w_organization_social — Post, comment and like posts on behalf of an organization.

rw_ads — Create ads and creatives for a sponsored account

rw_organization_admin — Manage organizations pages and retrieve reporting data.

r_ads — Read an authenticated member’s ad accounts. Restricted to ad accounts in which the authenticated member has one of the following ad account roles.

r_ads_reporting — Retrieve reporting for advertising accounts.

r_1st_connections_size — Retrieve the count of an authenticated member’s 1st-degree connections.

r_sales_nav_analytics

r_sales_nav_display

r_fullprofile

What I write here is not my teaching, but my study; it is not a lesson for others, but for me. — Montaigne