# Workflows Insufficient scope **URL:** \ **Category:** Questions\ **Created:** [October 20, 2023, 3:27am UTC](https://devforum.okta.com/t/workflows-insufficient-scope/25598 "2023-10-20T03:27:55Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![jcarrollcybersove](https://avatars.discourse-cdn.com/v4/letter/j/f07891/32.png) [@jcarrollcybersove](https://devforum.okta.com/u/jcarrollcybersove)\ **Post date:** [October 20, 2023, 3:27am UTC](https://devforum.okta.com/t/workflows-insufficient-scope/25598/1 "2023-10-20T03:27:55Z")
I’m trying to retrieve a Policy Object in Workflows using the Custom API action. It seems to find the policy but throws a 403: www-authenticate:Bearer authorization\_uri=“[http://iaas-demo.oktapreview.com/oauth2/v1/authorize](http://iaas-demo.oktapreview.com/oauth2/v1/authorize)”, realm=“[http://iaas-demo.oktapreview.com](http://iaas-demo.oktapreview.com)”, scope=“okta.policies.read”, error=“insufficient\_scope”, error\_description=“The access token provided does not contain the required scopes.”, resource=“/api/v1/policies/rstadj89ogivxpvsd1d7” I tried adding “okta.policies.read” to the scopes in the Auth Server but it said I couldn’t. Anyway around this? Thanks, ---
**Author:** ![andrea](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/andrea/32/2172_2.png) [@andrea](https://devforum.okta.com/u/andrea)\ **Post date:** [October 20, 2023, 11:53pm UTC](https://devforum.okta.com/t/workflows-insufficient-scope/25598/2 "2023-10-20T23:53:13Z")
Can you try granting the okta.policies.read scope for the Okta Workflows OAuth application (on the Okta API Scopes tab) in your org? ![Screenshot 2023-10-20 at 4.53.31 PM](https://global.discourse-cdn.com/oktadev/original/2X/d/d1922d5354281d30e7fae8d45d5976629fd75c50.png) … ![Screenshot 2023-10-20 at 4.53.49 PM](https://global.discourse-cdn.com/oktadev/original/2X/f/f48c76dd50ba0dcd6f999cf02c3117bae105bf7f.png)