# Not enough permission to accumulate order loyalty points

**URL:** <https://developer.squareup.com/forums/t/not-enough-permission-to-accumulate-order-loyalty-points/18381>\
**Category:** Questions\
**Tags:** loyalty-api, oauth-api\
**Created:** [August 20, 2024, 5:58pm UTC](https://developer.squareup.com/forums/t/not-enough-permission-to-accumulate-order-loyalty-points/18381 "2024-08-20T17:58:15Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![wsdzy2010](https://avatars.discourse-cdn.com/v4/letter/w/58f4c7/32.png) [@wsdzy2010](https://developer.squareup.com/forums/u/wsdzy2010)\
**Post date:** [August 20, 2024, 5:58pm UTC](https://developer.squareup.com/forums/t/not-enough-permission-to-accumulate-order-loyalty-points/18381/1 "2024-08-20T17:58:16Z")

</div>

Hi,

Our Square application is supposed to have the loyalty points permission and it works well for all other merchant clients. Only this merchant has the issue and we have tried several times to de-auth and re-auth it. Here are our permission details. Please help us with it.

 ![image](https://global.discourse-cdn.com/square/original/2X/a/a2f34baabdfc0cb744ae22ba257c825b13b07c1e.png)

This the the request.

```auto
{
  "accumulate_points": {
    "order_id": "FukYofq2OmfLNWwQ4eWeIIopTifZY"
  },
  "idempotency_key": "FukYofq2OmfLNWwQ4eWeIIopTifZY",
  "location_id": "VRH568RGDHCEJ"
}

```

This is the response

```auto
{
  "errors": [
    {
      "code": "FORBIDDEN",
      "detail": "Application does not have permission to access the resource",
      "category": "AUTHENTICATION_ERROR"
    }
  ]
}

```

---

<div class="post-metadata">

**Author:** ![Square-Dev-AI](https://sea1.discourse-cdn.com/square/forums/user_avatar/developer.squareup.com/square-dev-ai/32/2513_2.png) [@Square-Dev-AI](https://developer.squareup.com/forums/u/Square-Dev-AI)\
**Post date:** [August 20, 2024, 5:58pm UTC](https://developer.squareup.com/forums/t/not-enough-permission-to-accumulate-order-loyalty-points/18381/2 "2024-08-20T17:58:41Z")

</div>

👋 I’m Square Dev AI, here to help answer your question!  
Based on the information you’ve provided, the following documentation will help answer your question:

> **[Manage Loyalty Points](https://developer.squareup.com/docs/loyalty-api/loyalty-points)**
>
> Learn how to use the Square Loyalty API to accumulate or adjust points for a loyalty account.

> **[Redeem Loyalty Points for a Discount (Walkthrough 1)](https://developer.squareup.com/docs/loyalty-api/walkthrough1/redeem-points)**
>
> Learn about the Square Loyalty API and how to accrue and redeem points.

> **Additional Documentation**
>
> [Redeem Loyalty Points for a Discount (Walkthrough 2)](https://developer.squareup.com/docs/loyalty-api/walkthrough2-redeem-points)  
> [Accumulate Loyalty Points for a Buyer (Walkthrough 1)](https://developer.squareup.com/docs/loyalty-api/walkthrough1/accrue-points)  
> [Merchants API Overview](https://developer.squareup.com/docs/merchants-api)

If this documentation helped you find a solution, please check the box indicating that this reply solves the problem.  
Otherwise one of our Developer Advocates will provide additional assistance shortly.

---

<div class="post-metadata">

**Author:** ![Bryan-Square](https://sea1.discourse-cdn.com/square/forums/user_avatar/developer.squareup.com/bryan-square/32/38_2.png) [@Bryan-Square](https://developer.squareup.com/forums/u/Bryan-Square)\
**Post date:** [August 20, 2024, 7:34pm UTC](https://developer.squareup.com/forums/t/not-enough-permission-to-accumulate-order-loyalty-points/18381/3 "2024-08-20T19:34:33Z")

</div>

Is the access token the correct token for the account? 🙂

---

<div class="post-metadata">

**Author:** ![wsdzy2010](https://avatars.discourse-cdn.com/v4/letter/w/58f4c7/32.png) [@wsdzy2010](https://developer.squareup.com/forums/u/wsdzy2010)\
**Post date:** [August 20, 2024, 9:12pm UTC](https://developer.squareup.com/forums/t/not-enough-permission-to-accumulate-order-loyalty-points/18381/4 "2024-08-20T21:12:29Z")

</div>

I’m sure it’s correct and the same service served lot of merchants.

---

<div class="post-metadata">

**Author:** ![Bryan-Square](https://sea1.discourse-cdn.com/square/forums/user_avatar/developer.squareup.com/bryan-square/32/38_2.png) [@Bryan-Square](https://developer.squareup.com/forums/u/Bryan-Square)\
**Post date:** [August 20, 2024, 9:37pm UTC](https://developer.squareup.com/forums/t/not-enough-permission-to-accumulate-order-loyalty-points/18381/5 "2024-08-20T21:37:45Z")

</div>

Are subsequent requests succeeding? 🙂

---

<div class="post-metadata">

**Author:** ![wsdzy2010](https://avatars.discourse-cdn.com/v4/letter/w/58f4c7/32.png) [@wsdzy2010](https://developer.squareup.com/forums/u/wsdzy2010)\
**Post date:** [August 20, 2024, 10:39pm UTC](https://developer.squareup.com/forums/t/not-enough-permission-to-accumulate-order-loyalty-points/18381/6 "2024-08-20T22:39:59Z")

</div>

All the point accumulate requests failed while the order API calls worked as expected, I don’t think it’s a temporary issue.

 ![image](https://global.discourse-cdn.com/square/original/2X/a/a01697508fdb5c0dadd1d9840e6306b2701436d7.png)

---

<div class="post-metadata">

**Author:** ![Bryan-Square](https://sea1.discourse-cdn.com/square/forums/user_avatar/developer.squareup.com/bryan-square/32/38_2.png) [@Bryan-Square](https://developer.squareup.com/forums/u/Bryan-Square)\
**Post date:** [August 20, 2024, 11:14pm UTC](https://developer.squareup.com/forums/t/not-enough-permission-to-accumulate-order-loyalty-points/18381/7 "2024-08-20T23:14:34Z")

</div>

The team is taking a look. 🙂

---

<div class="post-metadata">

**Author:** ![wsdzy2010](https://avatars.discourse-cdn.com/v4/letter/w/58f4c7/32.png) [@wsdzy2010](https://developer.squareup.com/forums/u/wsdzy2010)\
**Post date:** [August 21, 2024, 8:04pm UTC](https://developer.squareup.com/forums/t/not-enough-permission-to-accumulate-order-loyalty-points/18381/8 "2024-08-21T20:04:03Z")

</div>

Thank you! Please let us if there is any update. It affects the merchant operation and we want to solve it for them asap.

---

<div class="post-metadata">

**Author:** ![wsdzy2010](https://avatars.discourse-cdn.com/v4/letter/w/58f4c7/32.png) [@wsdzy2010](https://developer.squareup.com/forums/u/wsdzy2010)\
**Post date:** [August 22, 2024, 7:34pm UTC](https://developer.squareup.com/forums/t/not-enough-permission-to-accumulate-order-loyalty-points/18381/9 "2024-08-22T19:34:10Z")

</div>

Is there any update?

---

<div class="post-metadata">

**Author:** ![wsdzy2010](https://avatars.discourse-cdn.com/v4/letter/w/58f4c7/32.png) [@wsdzy2010](https://developer.squareup.com/forums/u/wsdzy2010)\
**Post date:** [August 29, 2024, 3:44pm UTC](https://developer.squareup.com/forums/t/not-enough-permission-to-accumulate-order-loyalty-points/18381/10 "2024-08-29T15:44:14Z")

</div>

We just found that the account id doesn’t match the order, sorry about it.

---

<div class="post-metadata">

**Author:** ![Bryan-Square](https://sea1.discourse-cdn.com/square/forums/user_avatar/developer.squareup.com/bryan-square/32/38_2.png) [@Bryan-Square](https://developer.squareup.com/forums/u/Bryan-Square)\
**Post date:** [August 29, 2024, 5:59pm UTC](https://developer.squareup.com/forums/t/not-enough-permission-to-accumulate-order-loyalty-points/18381/11 "2024-08-29T17:59:16Z")

</div>

Glad to hear you figured it out. 🙂