title: 403 error when accessing users in a project
body: <p>I am trying to get the list of users who have access to a project using this <a href="https://forge.autodesk.com/en/docs/bim360/v1/reference/http/admin-v1-projects-projectId-users-GET/" rel="nofollow noreferrer">Forge API</a>. I have given the scope as <code>account:read</code>. I tried it suing Postman and also from ASP.NET Core backend which I am developing.
  In both cases I get the same error:</p>
  <pre><code>{
      &quot;status&quot;: 403,
      &quot;type&quot;: &quot;&quot;,
      &quot;id&quot;: &quot;80757c600ab0de6c&quot;,
      &quot;title&quot;: &quot;Forbidden&quot;,
      &quot;detail&quot;: &quot;The 3 legged access token does not have access&quot;
  }
  </code></pre>
  <p>Is there anything that I need to change in BIM 360 so that I can resolve this error?
  This is my backend code (BASE URL):</p>
  <pre><code>
          [HttpPost]
          [Route(&quot;api/forge/bim360/projectusers&quot;)]
          public async Task&lt;dynamic&gt; GetProjectUsersAsync([FromQuery] string projectId, [FromQuery] string userId)
          {
              dynamic access_token = await CheckToken();
  
              RestClient client = new RestClient(BASE_URL);
              RestRequest request = new RestRequest(&quot;/bim360/admin/v1/projects/{project_id}/users&quot;, RestSharp.Method.GET);
              request.AddParameter(&quot;project_id&quot;, projectId, ParameterType.UrlSegment);
              request.AddHeader(&quot;Authorization&quot;, &quot;Bearer &quot; + access_token);
              request.AddHeader(&quot;User-Id&quot;, userId);
  
              try
              {
                  IRestResponse issueTypesResponse = await client.ExecuteGetTaskAsync(request);
                  dynamic users = JObject.Parse(issueTypesResponse.Content);
  
                  return Ok(&quot;Found Users&quot;);
              }
              catch (Exception ex)
              {
                  //TODO Add real logger
                  StreamWriter st = new StreamWriter(@&quot;Logg/logg.txt&quot;, true);
                  st.Write(ex.Message);
                  st.Close();
                  return StatusCode(500);
              }
          }
  
  </code></pre>
  <p>Any help appreciated.</p>