We are seeing a **401002** error when calling:
`GET /api/<api-version>/sites/<site-id>/workbooks/<workbook-id>/revisions`
using **Direct Trust (JWT) authentication**.
Our authentication flow is:
* `POST /api/<api-version>/auth/signin` → **Success** * `GET /api/<api-version>/sites/<site-id>/workbooks` → **Success** * `GET /api/<api-version>/sites/<site-id>/workbooks/<workbook-id>/revisions` → **401002**
The JWT is generated with the following scopes:
```json "scp": [ "tableau:content:read", "tableau:workbooks:*", "tableau:workbooks:download", "tableau:datasources:*" ] ```
Since other workbook APIs work with the same token, could you please confirm whether the **Workbook Revisions** endpoint is supported with Direct Trust authentication, or if it requires additional scopes or permissions?
here is the link to the official documentation:
https://help.tableau.com/current/api/rest_api/en-us/REST/rest_api_ref_revisions.htm#get_workbook_revisions
PermissionsTableau Server users who are site administrators can get workbook revisions on the site that they are administrators for. Users who are not server administrators or site administrators can get workbook revisions if they have all of the following:
- A site role of ExplorerCanPublish.
- Read (view), Write (save), and Download (save as) permissions for the specified workbook.
- Save (write) permissions for the project that contains the workbook.
Access Scope
Scope added in API 3.27 (Tableau Cloud December 2025 / Server 2025.3).
tableau:content:read
