# Authentication errors

All error codes returned by the Authentication endpoints (20 total).

Every error returned by the **Authentication** endpoints. Click any code for the full example response and localized messages.

| Code | Message |
|------|---------|
| [`ACCOUNT_MANAGEMENT_FORBIDDEN`](/errors/ACCOUNT_MANAGEMENT_FORBIDDEN) | Only the owner or an admin can manage account settings. |
| [`ACCOUNT_NOT_ACCESSIBLE`](/errors/ACCOUNT_NOT_ACCESSIBLE) | You do not have access to that account |
| [`ACCOUNT_REQUIRES_FOCUS_SWITCH`](/errors/ACCOUNT_REQUIRES_FOCUS_SWITCH) | You are a member of that account, but it is not your active account right now. Switch your active account and try again. |
| [`ACTIVE_COMPANY_HEADER_INVALID`](/errors/ACTIVE_COMPANY_HEADER_INVALID) | Header '‹value›' must contain a company identifier (UUID). |
| [`ACTIVE_COMPANY_NOT_ACCESSIBLE`](/errors/ACTIVE_COMPANY_NOT_ACCESSIBLE) | The selected company does not belong to your account |
| [`ACTIVE_COMPANY_REQUIRED`](/errors/ACTIVE_COMPANY_REQUIRED) | Select an active company (NIF) for this operation |
| [`API_KEY_LIVE_NOT_AVAILABLE`](/errors/API_KEY_LIVE_NOT_AVAILABLE) | This is a live API key, but your account does not have live mode available yet. |
| [`COMPANY_ACCESS_REVOKED`](/errors/COMPANY_ACCESS_REVOKED) | Your access to this company was revoked while the operation was running |
| [`COMPANY_READ_ONLY`](/errors/COMPANY_READ_ONLY) | Your role on this company is read-only; you cannot perform this action |
| [`ENVIRONMENT_HEADER_INVALID`](/errors/ENVIRONMENT_HEADER_INVALID) | Header '‹value›' has an invalid value. Accepted values: TEST, PROD (legacy aliases: sandbox, test, production, live) |
| [`INSUFFICIENT_SCOPE`](/errors/INSUFFICIENT_SCOPE) | The API key lacks the required permissions (scopes) for this operation. |
| [`LIVE_CREDENTIAL_REQUIRED`](/errors/LIVE_CREDENTIAL_REQUIRED) | This operation changes the real account; it requires a live API key or a dashboard session. |
| [`MANAGED_ACCESS_INSUFFICIENT`](/errors/MANAGED_ACCESS_INSUFFICIENT) | Management access over that account is not enough for this operation |
| [`MANAGED_ACCOUNT_HOLDER_REQUIRED`](/errors/MANAGED_ACCOUNT_HOLDER_REQUIRED) | This managed NIF has no holder yet; it must be claimed before connecting a payment provider |
| [`MANAGED_SCOPE_ELEVATION_REQUIRES_OWNER`](/errors/MANAGED_SCOPE_ELEVATION_REQUIRES_OWNER) | Only the account holder can raise management access over their account once it has been claimed |
| [`MEMBER_MANAGEMENT_FORBIDDEN`](/errors/MEMBER_MANAGEMENT_FORBIDDEN) | Only the owner or an admin can manage account members. |
| [`OPERATION_REQUIRES_API_KEY`](/errors/OPERATION_REQUIRES_API_KEY) | This operation is privileged and only available with an API key holding the matching scope (e.g. accounts:write); it cannot be performed from the web session. |
| [`OPERATION_REQUIRES_SESSION`](/errors/OPERATION_REQUIRES_SESSION) | This operation is only available from the web session; it cannot be performed with an API key or OAuth. |
| [`OWNER_ROLE_RESERVED`](/errors/OWNER_ROLE_RESERVED) | Only an owner can assign or transfer the owner role. |
| [`UNAUTHORIZED`](/errors/UNAUTHORIZED) | Authentication is required to access this resource |

## Keep exploring

<div className="grid grid-cols-2 gap-3 not-prose">
  <Card title="Error reference home" description="Landing page with all categories and a guide on handling errors." href="/errors" />
  <Card title="Handling errors" description="Response shape, the type URI, and programmatic patterns." href="/guides/handling-errors" />
</div>

---

Full OpenAPI spec: https://docs.beel.es/api/openapi