Skip to main content
Marwen TALEB
MVP ⭐️⭐️⭐️⭐️⭐️
MVP ⭐️⭐️⭐️⭐️⭐️
Nov 4, 2026 5:18 AM UTC
Question

Do we need timeSeriesAcl:read to read timeseries subscriptions?

Hello, 

Is timeSeriesAcl:read acl required for data point subscription consumption? 

Although the client has timeSeriesSubscriptionsAcl:read. We recieve: CogniteAPIError: Missing capability to read Time series | code: 403. When calling: ‘client.time_series.subscriptions.iterate_data’.

Thanks

1 reply

Mithila Jayalath
Expert ⭐️⭐️⭐️⭐️
Expert ⭐️⭐️⭐️⭐️
Nov 4, 2026 9:00 AM UTC

​@Marwen TALEB  timeSeriesAcl:READ is required in addition to timeSeriesSubscriptionsAcl:READ when consuming data point subscriptions.

The required capabilities for creating and consuming subscriptions are:

  1. Subscription access (timeSeriesSubscriptionsAcl):

    • READ — to list subscriptions and retrieve updates

    • WRITE — to create, update, or delete subscriptions

  2. Time series access (one of the following):

    • timeSeriesAcl:READ scoped to all or to the relevant data set IDs containing your time series

    • Or, if using Data Modeling, the applicable dataModelsAcl:READ and dataModelInstancesAcl:READ permissions

CDF checks that the client has read access to the target time series, not just subscription-level permissions.