# API Token required scope not always correct in API

**URL:** <https://community.dynatrace.com/t/api-token-required-scope-not-always-correct-in-api/51909>\
**Category:** Dynatrace API\
**Tags:** settings, dynatrace-api, tokens\
**Created:** [June 2, 2025, 4:24pm UTC](https://community.dynatrace.com/t/api-token-required-scope-not-always-correct-in-api/51909 "2025-06-02T16:24:41Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![henk\_stobbe](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/henk_stobbe/32/30434_2.png) [@henk\_stobbe](https://community.dynatrace.com/u/henk_stobbe)\
**Post date:** [June 2, 2025, 4:24pm UTC](https://community.dynatrace.com/t/api-token-required-scope-not-always-correct-in-api/51909/1 "2025-06-02T16:24:41Z")

</div>

![henk_stobbe_0-1748881339655.png](https://global.discourse-cdn.com/dynatrace/original/2X/5/5bd9db730381ed7d9ced3eccb2b075c8b7298103.png)

Nice to know, you also need settings.read to execute… Maybe this should be updated (-;

Thanks&nbsp;@joep, [@henri](https://community.dynatrace.com/user/34697)

---

<div class="post-metadata">

**Author:** ![azzollinigianlu](https://avatars.discourse-cdn.com/v4/letter/a/e9a140/32.png) [@azzollinigianlu](https://community.dynatrace.com/u/azzollinigianlu)\
**Post date:** [June 11, 2025, 9:09am UTC](https://community.dynatrace.com/t/api-token-required-scope-not-always-correct-in-api/51909/2 "2025-06-11T09:09:07Z")

</div>

Thank you for the feedback&nbsp;[@henk\_stobbe](https://community.dynatrace.com/user/11427): I just tested it out as well and confirmed the request returns “Access denied” when using settings.write as scope rather than settings.write & settings.read combined and linked to the same Access Token.

I will report it internally and ask to change it

 ![azzollinigianlu_0-1749632884831.png](https://global.discourse-cdn.com/dynatrace/original/2X/1/10bc1041064fe5383b1288794bc68ce962435227.png)