As part of our workflow, we need to retrieve historical value of fields like BID, ASK, MID, and VALUE_DT1 data for specific instruments. Below is an example of the API call we intend to use:

import asyncio

import lseg.data as ld

from lseg.data.content import historical_pricing

ld.open_session()

df = ld.get_history(

    universe=['AU2MBA='],

    fields=['BID', 'ASK', 'MID_1', 'VALUE_DT1'],

    start='2025-11-26',

    end='2025-11-30',

    interval='1D'

)

To proceed, we require the appropriate entitlements/permissions enabling the use of the Historical Pricing endpoint (ld.get_history).

This access is essential for our development, testing, and analysis tasks.

Could you please kindly help enable the required permissions, or advise on the necessary steps or approvals needed?

However, when we send a MarketPrice request for this instrument, the API responds with the following error message:

"Access Denied: User req to PE(3157)"

This appears to indicate that our user account does not have the necessary permission or entitlement to access this instrument. How can I obtain authorization for the .TLREFK ric code?

Addresses I use:

https://api.refinitiv.com/streaming/pricing/v1/ (For websocket endpoint)
trapi.streaming.pricing.read (scope)
us-east-1 (region)

Thanks.

We are using the same user login concurrently from two different servers. The application configuration is identical on both servers.

On one server, subscriptions work as expected.

On the other server, we consistently receive Access Denied / Not entitled status messages for a specific subset of RICs when we attempt to subscribe to them.

The affected RICs are:

AUCASH=
AUCASH=RBAA
AUDFIX10H=WM
AUDNZD=S
AUD=S
AUUS3BSRBS=WPAC
MONEY
NZCASH=RBNZ
NZDFIX14H=WM
NZD=S

A typical status message looks like:

State: Closed / Suspect / Not entitled
Text: "Access Denied: User req to IDN for Prod e.g. - WWRIVXMKT"
Service: hEDD
Domain: MarketPrice

What makes this confusing is that these exact same RICs subscribe successfully on the other server at the same time using the same login.

So far, we’re considering a few possibilities, but haven’t been able to confirm any of them:

Are there RIC-level entitlements that restrict concurrent usage of the same login from multiple hosts?

Do any of the above RICs have stricter entitlement or concurrency rules than standard instruments?

Is it even possible for entitlements to behave differently depending on the server, host, or connection context?

If anyone has seen similar behaviour with the EMA API or can point out something obvious we might be missing that would be great.

Thanks!

try:
r = requests.get(url, headers={"Authorization": "Bearer " + auth_token}, params={"transport": "websocket"}, allow_redirects=False)
except requests.exceptions.RequestException as e:
print('Refinitiv Data Platform service discovery exception failure:', e)
return False

But i am getting the below error

  "code": "insufficient_scope",  "message": "access denied. Scopes required to access the resource: [trapi.streaming.pricing.read]. Missing scopes: [trapi.streaming.pricing.read]",  "status": "Forbidden"

Client ID - GE-D7WVF65ZJUEE

I’m working on a Python script that needs to connect to LSEG without Workspace being launched. My goal is to retrieve the last closes (TR.PriceClose) and the latest trade via (TRDPRC_1).

It turns out that I can retrieve TR.PriceClose without any issue, but not TRDPRC_1.

here is part of the connect code:

import refinitiv.data as rd from concurrent.futures

import ThreadPoolExecutor, as_completed from refinitiv.data.content

import historical_pricing from refinitiv.data.content.historical_pricing

import Intervals, MarketSession

rd.open_session(name="platform.ldp", config_name="config/session.json")

When I run the same script while connected through Workspace, it works when i connect using

rd.open_session() instead of

rd.open_session(name="platform.ldp", config_name="config/session.json")

I therefore conclude that I don’t have permission to access TRDPRC_1 with the way I am logging in. How can I retrieve both TRDPRC_1 and TR.PriceClose without Workspace and using Python?

thanks in advance

Its is affecting our production environment and WE HAVE URGENCY ON THIS.
The following are presenting access denied message:

CADBRL=R
USDGBP=R
TRYUSD=R
KRWGBP=R
AUDBRL=R
SGDUSD=R
CHFUSD=R
INRBRL=R
HKD=
RUB=
BRLGBP=R
CNYUSD=R
NZDBRL=R
BRLCHF=R
JPYUSD=R
USDNZD=R
BRLRUB=R
BRLEUR=R
SEKBRL=R
ARSBRL=R
JPYBRL=R
NOKUSD=R
CHFBRL=R
USDEUR=R
CADUSD=R
INRUSD=R
HKDUSD=R
BRLCNY=R
CAD=
BRLINR=R
BRLZAR=R
MXNBRL=R
GBP=
KRW=
AUD=
ZARBRL=R
DKKUSD=R
GBPBRL=R
BRLCAD=R
CNHUSD=R
SGD=
BRLKRW=R
USDAUD=R
ZARUSD=R
DKKBRL=R
BRLSEK=R
INR=
BRLCNH=R
BRLNOK=R
BRLMXN=R
MXNUSD=R
BRLSGD=R
JPYEUR=R
BRLAUD=R
EUR=
BRLTRY=R
CHF=
HKDBRL=R
BRLNZD=R
EURBRL=R
BRLC=
JPY=
RUBUSD=R
NOKBRL=R
SEKUSD=R
ARSUSD=R
EURJPY=

On Friday it was working as expected.

I'm trying to figure out what the best scope would be to grab historical Bid and Ask prices when using the RDP/API account?

Below is what I have but I'm running into issues. Could you just confirm if this is correct or not?

--data-urlencode 'grant_type=password'
--data-urlencode 'username= 'XXXXX'
--data-urlencode 'scope= 'trapi.data.historical-pricing.events.read'
--data-urlencode 'client_id= 'XXXXX'
--data-urlencode 'password= 'XXXXX'
--data-urlencode 'takeExclusiveSignOnControl=true'

I get this error when trying to get the token to work

{'error': {'id': '8c45e309-f6ef-433e-987e-329cc84ec98d', 'code': 'insufficient_scope', 'message': 'access denied. Scopes required to access the resource: [trapi.data.historical-pricing.events.read]. Missing scopes: [trapi.data.historical-pricing.events.read]', 'status': 'Forbidden'}}

Many thanks!

We've noticed this occurring more frequently over the past few months. How can we resolve this?

The access to field(s) denied. Requested universes: ['CA007863AB91', 'US91754TG983']. Requested fields: ['TR.PREFERREDRIC', 'TR.MUNIORIGINALAMOUNTISSUED', 'TR.FIAMTOUTSTANDINGFACTOR']

from this script:

import refinitiv.data as rd
rd.open_session()
df = rd.get_data(
universe = ['CA007863AB91','US91754TG983'],
fields = ['TR.PreferredRIC','TR.MUNIORIGINALAMOUNTISSUED','TR.FIAMTOUTSTANDINGFACTOR','TR.MUNIORIGINALAMOUNTISSUED']
)

display(df)

However, the script is working on our end. Not replicable. Can you please help? Thank you

I'm assuming that he DACS system applies the U.ITEM.MAX.AGGREGATE value to the user's subscriptions and denies subscriptionTest request when the user has hit their max aggregate limit.

There's one thing I don't understand. There doesn't appear to be a DACS request to indicate a user is no longer subscribing to an item. So, what happens with a sequence like this:

(assume U.ITEM.MAX.AGGREGATE value set to 3 and all items are permissioned for the user)

User asks to subscribe to ServiceA, Symbol1 → subscriptionTest succeeds.

User asks to subscribe to ServiceA, Symbol2 → subscriptionTest succeeds.

User asks to subscribe to ServiceB, Symbol3 → subscriptionTest succeeds.

User asks to subscribe to ServiceA, Symbol4 → subscriptionTest (presumably) fails (above item limit)

User stops subcribing to ServiceA, Symbol1 and Symbol2 → No way to indicate this to DACS

User asks to subscribe to ServiceA, Symbol4 → What happens here? What should happen?

Thanks In Advance for any help you can give.

— Kevin N.

access denied. Scopes required to access the resource: [trapi.data.pricing.read]. Missing scopes: [trapi.data.pricing.read]

ScopeError: Insufficient scope for key=/data/news/v1/headlines, method=GET.

Missing scopes: {'trapi.data.news.read'}

When using the following endpoint:
https://api.refinitiv.com/data/pricing/snapshots/v1/

I receive “no permission” responses for certain RICs.
Here are some examples:

USAPIC=ECI
USOIAI=ECI
USOIAH=ECI
USOIAP=ECI
USOIAR=ECI
USOIAC=ECI
USOIAD=ECI
USOIAG=ECI
USPMIP=ECI
USPMCF=ECI
USMPMF=ECI
USMPMP=ECI
USMPSF=ECI
USMPSP=ECI

However, other RICs such as USCPSA=ECI return data normally without any permission issues.

Could you please clarify whether the restricted RICs above are intentionally unavailable in the Snapshots API,
or if this indicates an entitlement issue with my account?
If additional permissions are required, I’d appreciate guidance on how to enable access.

• USCPSA=ECI

• USPMIP=ECI

Thank you for your support.

I have a question regarding you Python API. I am trying to pull data for ISIN FR001400CKA4. However, I get the following error:refinitiv.data._errors.RDError: Error code 1 | No data to return, please check errors: ERROR: No successful response.(TS.Intraday.UserNotPermission.92000, User has no permission)This code works for many bonds apart from a few can you explain to me what the issue may be?bars = hp.summaries.Definition(universe = ric,interval = hp.Intervals.ONE_MINUTE,start = f"{self.NAVDate}T00:00:00",end = f"{self.NAVDate}T23:59:59",fields = ["BID"]).get_data().data.df.rename(columns={"BID": "PRICE"})

Kindly note RIC FR001400CKA4= has the permission to access the data.

Below are the WebSocket communication request and the corresponding response message:

Sent Request Message:
{"ID":2,"Key":{"Name":"JPY="},"View":["BID","ASK"],"Streaming":true}

Received Message:

[{"ID":2,"Type":"Status","Key":{"Service":"ELEKTRON_DD","Name":"JPY="},"State":{"Stream":"Closed","Data":"Suspect","Code":"NotEntitled","Text":"A21: DACS User Profile denied access to vendor\u000a"}}]

I followed the initialization tutorial, supplying my ApiKey, and ProductId as needed, and things seemed to work fine when running from localhost. But when I publish the project and try to access it from one of the approved URLs it fails with some of the following errors.

Any help or insight into what's happening, or going wrong, would be appreciated. Thank you.

• SxS application verification request failed Error: Error executing POST request for https://workspace.refinitiv.com/apps/thinembed/Verify : Status: 403

• SxS application is not permissioned to use Workspace Web: ApiKey check failed. Please provide correct app data.

• ERROR Error: SxsWeb initialization failed with status: app-permission-error

I am encountering an "insufficient scope" error when using the LSEG Data Library for Python (version 2.1.1) to retrieve snapshot pricing data for EUR= and GBP= via ld.get_data. Despite successful authentication and session opening, the request fails with a 403 Forbidden error due to missing the trapi.streaming.pricing.read scope. I would appreciate your guidance on resolving this issue.

Environment

• LSEG Data Library: 2.1.1
• Python: 3.12.3
• OS: Linux (Ubuntu)
• Configuration: Using platform.rdp session with lseg-data.config.json
• Client ID: [MASKED]

Source Code

Below is the Python script (test_jpy.py) I am running, based on LD Lib. Python Tutorial 3 - get_data.ipynb:

Error Log

Here is the relevant error output from the latest run (sensitive information masked):

textCopyOpening session...[2025-05-11T02:56:16.019846+08:00] - [DEBUG] - [ld] - [132973301784704] | MainThreadLD version is 2.1.1; Python version is 3.12.3[2025-05-11T02:56:16.071211+08:00] - [DEBUG] - [ld] - [132973301784704] | MainThreadRead configs: /home/ian/rdp_v2_project/lseg-data.config.json, /home/ian/lseg-data.config.json[2025-05-11T02:56:17.011363+08:00] - [DEBUG] - [sessions.platform.rdp.0] - [132973027874496] | AuthManager-ThreadHTTP Response id 0 status_code = 200 text = { "expires_in":7199, "token_type":"Bearer", "access_token":"[MASKED]"}[2025-05-11T02:56:17.030189+08:00] - [DEBUG] - [sessions.platform.rdp.0] - [132973301784704] | MainThreadOpened sessionSession opened successfully.Fetching data for EUR= and GBP=...[2025-05-11T02:56:18.122872+08:00] - [DEBUG] - [sessions.platform.rdp.0] - [132972705924800] | OpenUniverseStreams-Thread_0HTTP Response id 1 status_code = 403 text = {"error":{"id":"9a1ea292-7db7-497f-983c-b9674afa8d65","code":"insufficient_scope","message":"access denied. Scopes required to access the resource: [trapi.streaming.pricing.read]. Missing scopes: [trapi.streaming.pricing.read]","status":"Forbidden"}}[2025-05-11T02:56:18.135051+08:00] - [DEBUG] - [sessions.platform.rdp.0] - [132973301784704] | MainThreadFailure retrieving data for ['EUR=', 'GBP=']: Insufficient scope for key=/streaming/pricing/v1/, method=GET.Required scopes: {'trapi.streaming.pricing.read'}Available scopes: {}Missing scopes: {'trapi.streaming.pricing.read'}An error occurred: Insufficient scope for key=/streaming/pricing/v1/, method=GET.Required scopes: {'trapi.streaming.pricing.read'}Available scopes: {}Missing scopes: {'trapi.streaming.pricing.read'}Closing session...Session closed.

Issue Description

• Problem: The script fails at ld.get_data with a 403 Forbidden error, indicating that my account lacks the trapi.streaming.pricing.read scope required for the /streaming/pricing/v1/ endpoint.
• Observations:
  • Authentication succeeds, and the session opens correctly.
  • The error occurs when requesting pricing data for EUR= and GBP= with fields BID and ASK.
  • Previous attempts with other RICs (e.g., JPY=) yielded the same error.
  • Multiple config files are loaded (/home/ian/rdp_v2_project/lseg-data.config.json and /home/ian/lseg-data.config.json), which may cause conflicts.
• Previous Attempts:
  • Verified lseg-data.config.json with signon_control: true.
  • Updated lseg-data to 2.1.1 and fixed setuptools warnings.
  • Syntax errors (e.g., unclosed lists, try-except issues) were resolved based on Pylance feedback.

Questions

1. How can I obtain the trapi.streaming.pricing.read scope for my account? Do I need a specific subscription for real-time forex data (EUR=, GBP=)? Whom should I contact to update my account permissions?
2. Is there a workaround to retrieve BID and ASK for EUR= and GBP= without this scope (e.g., using historical pricing or another endpoint)?
3. Does lseg-data 2.1.1 support the Pricing interface for streaming data? If so, what is the correct import path (e.g., lseg.data.streaming.Pricing)?
4. Could the multiple config files cause this issue? Should I remove /home/ian/lseg-data.config.json?

h-ihsm-MuniBookbuildSupport@spglobal.com

File Id: 4720-1daf-f4c4fe12-996b-65ea2aa13283

I am getting the below error:

requests.exceptions.HTTPError: 403 Client Error: Forbidden for url: https://api.refinitiv.com/file-store/v1/files/4720-1daf-f4c4fe12-996b-65ea2aa13283/stream

This is the code snippet:

endpoint = f"{RDP_HOST}/file-store/v1/files/{file_id}/stream"
headers = {
"Authorization": f"Bearer {token}",
"cache-control": "no-cache",
"Accept": "/",
}

with requests.get(endpoint, headers=headers, stream=True, allow_redirects=True, timeout=600) as resp:

    resp.raise_for_status()

    file_name.parent.mkdir(parents=True, exist_ok=True)

    with open(file_name, "wb") as fh:

        shutil.copyfileobj(resp.raw, fh, length=16_384)

we get some access denied for some instruments. is this some new right that is required?

Status for item FEIcm1 {

  "ID": 3,

  "Type": "Status",

  "Key": {

    "Service": "IDN_RDFNTS_CF",

    "Name": "FEIcm1"

  },

  "State": {

    "Stream": "Closed",

    "Data": "Suspect",

    "Code": "NotEntitled",

    "Text": "Access Denied: User req to PE(6459)"

  }

}

Also something: can we control the logs of the API? or get rid of them?

It must in the session definition, but the documentation is not explicit about that.

import lseg.data as ld

from lseg.data.content import symbol_conversion

ld.open_session()

isin_list = ["US0378331005", "JP1201091939"]

resp = symbol_conversion.Definition(

symbols = isin_list,


from_symbol_type = symbol_conversion.SymbolTypes.ISIN,


to_symbol_types = [symbol_conversion.SymbolTypes.RIC] 

).get_data()

display(resp.data.df)

ld.get_data(

universe = resp.data.df["RIC"].tolist(),


fields = ["BID","ASK"])

We are developing a Java application to programmatically download Initiation reports for specific companies using the Refinitiv Research API via REST requests. However, we are encountering a permission error indicating insufficient scope when attempting to access certain endpoints.

Problem Details:

1. Objective: Download Initiation reports (e.g., PDF documents) for specific companies using the Research API.
2. Endpoint Example:
   • URL: https://api.refinitiv.com/data/research/v1/documents/84269904/pdf?uuid=GENTC-185510
   • Response:jsonCopy{ "error": { "id": "42b7d198-f92c-4ceb-8c8a-4c0b0eab894c", "code": "insufficient_scope", "message": "access denied. Scopes required to access the resource: [trapi.data.research.read]. Missing scopes: [trapi.data.research.read]", "status": "Forbidden" }}
3. API Playground: We also tested the endpoint in the API Playground and received a similar "insufficient scope" error, confirming the permission issue.
4. Current Permissions: Our account has access to the following API types: Side by Side API, EDP API, and Eikon Data API. The access token is generated with the scope trapi.

Code Snippet:

• Authentication:
  HttpPost post = new HttpPost("https://api.refinitiv.com/auth/oauth2/v1/token");
  post.setHeader("Content-Type", "application/x-www-form-urlencoded");
  String body = String.format(
  "grant_type=password&username=%s&password=%s&client_id=%s&scope=trapi",
  USERNAME, PASSWORD, CLIENT_ID);
  // Execute request to obtain access token
• 


• API Request:
  HttpGet get = new HttpGet("https://api.refinitiv.com/data/research/v1/documents/84269904/pdf?uuid=GENTC-185510");
  get.setHeader("Authorization", "Bearer " + accessToken);
  // Execute request, results in 403 Forbidden

Questions:

1. Does our account need additional permissions or a specific license to access the trapi.data.research.read scope for the Research API?
2. If additional permissions are required, how can we verify or request access to this scope?
3. Are there specific configurations or parameters (e.g., scope values) we need to include in the authentication request to access the Research API?
4. Are there alternative endpoints or methods to programmatically download Initiation reports that align with our current permissions?

STATUS (Item Closed) Text: RTMDS*Access Denied: to IDN StreamState: CLOSEDDataState: SUSPECT
CACHED Status - StreamState: CLOSED DataState: SUSPECT 

https://github.com/LSEG-API-Samples/Article.EMA.Java.ConsumerRto.V2Auth.ClientCredentials/blob/main/ConsumerRto.java

The system returned my this message and nothing else.

Thanks.

I used tutorial 4 code and managed to get a view of several RICs ,

Now I am required to get data from a different service which requires a user

I saw in one answer for a different question ,

they say to set loginRequest.userName after rsslInitDefaultRDMLoginRequest using a setString function,

I did this after the call to rsslClearOMMConsumerRole just before :

consumerRole.pLoginRequest = &loginRequest;

but I still get "Access Denied: User req to IDN for Exch .."

I use the Java/RefinitivSDK 3.7.0.0 in order to receive RealTime data from TREP.

Once a RealTIme data is subscribed, the API notifies me through my implementation of the interface method OmmConsumerClient.onRefreshMsg(RefreshMsg refreshMsg, OmmConsumerEvent event)

The RefreshMsg argument provides:

• the permission of the RealTime data (cf method ByteBuffer RefreshMsg.permissionData())
• and also a PROD_PERM, that is an integer obtainable by getting the value of the field "PROD_PERM" (fields are obtained by calling refreshMsg.payload().fieldList())

For example, when subscribing to CZK2MD=, I get

• permissionData: { 0x03, 0x01, 0x01, 0x28, 0x70, 0xC0 }
• PROD_PERM: 2870

Today, I use the permissionData in order to "know" whether a user is allowed to use the RealTime data. Do do so, I use Java/RFA 8.2.1.L3 with something like:

    ByteBuffer dacsPermission;
    byte[] arr = new byte[dacsPermission.remaining()];
    dacsPermission.get(arr);
    AuthorizationLock authorizationLock = new AuthorizationLock(arr);

    ... 
    
    byte[] dacsLock = authorizationLock.getAuthorizationLock().clone();

    ...
    
    AuthorizationCheckResult authCheckResult =
            agent.checkSubscription(handle,
                    AuthorizationUsageType.DONT_PERFORM_USAGE_LOGGING,
                    AuthorizationRequestType.NORMAL_REQUEST_LOGGING,
                    new AuthorizationCheckStatus(),
                    "IDN_SELECTFEED",
                    "",
                    dacsLock);

    boolean isAuthorized = (authCheckResult == AuthorizationCheckResult.ACCESS_ALLOWED);

I would like to know if it is possible get the same information using the PROD_PERM instead of the permissionData.

Thank you to also explain the difference and/or the relationship between PROD_PERM and permissionData

Regards

Philippe

The client is accessing the refinitiv API through a platform session. When she try and pull data on managed funds and ETFs I receive a permission denied message. However, when using codebook to run the same codebook in Workspace, the client is able to pull the data with no issue.

The User have been trying to get code to work on:

tickers = ['LP65015435', 'VHY.AX', 'LP68028840', 'VOO']

When running that code in codebook it works perfectly.

Unfortunately, in Jupyter notebook it does not.

On API in jupyter notebook to pull stock data and it works, very strange as the User is running into a permission issue with ETFs and funds.