Unauthorized access to course completion

Question

I'm trying to call this API to check the completion status of a user

GET {{host}}/d2l/api/lp/{{version}}/enrollments/orgUnits/{{courseId}}/users/{{userId}}/completion

It is returning 403 Forbidden, even though the documented OAuth scope

https://docs.valence.desire2learn.com/res/enroll.html#get--d2l-api-lp-(version)-enrollments-orgUnits-(orgUnitId)-users-(userId)-completion

is just enrollment:completion:read

I have verified the access token includes this.

The API

GET {{host}}/d2l/api/lp/{{version}}/enrollments/orgUnits/{{courseId}}/users/{{userId}}

works and returns the expected details:

{  "OrgUnitId": 6775,  "UserId": 207,  "RoleId": 110,  "IsCascading": false }

Any ideas why this would fail?

Trevor.N.2527 · Answer

I finally found the missing permission requirements for this API! The missing permission appears to have been the bolded one below. * OAuth scope: enrollment:completion:read * Caller role:* ManageCompletionTracking at Course Offering * SeeCompletionProgressWidget at Course Offering * TrackCompletionProgress at Course Offering * SetCompletionStatus at Organization * Learner role:* SeeCompletionProgressWidget * TrackCompletionProgress

Trevor.N.2527 · Answer

Hi Tejas,

Thanks for your response. I am using a Super Admin generated access token, these are the scopes

"scope": "enrollment:completion:read enrollment:orgunit:create,read organizations:organization:read orgunits:course:read users:profile:read users:userdata:read"

@courseId=6775
@userId=207
@version=1.61

GET {{host}}/d2l/api/lp/{{version}}/enrollments/orgUnits/{{courseId}}/users/{{userId}}/completion
Authorization: Bearer {{access_token}}

and get this response

HTTP/1.1 403 Forbidden
Date: Mon, 20 Jul 2026 01:12:27 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 41
Connection: close
Access-Control-Allow-Credentials: false
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Disposition,Content-Length,Content-Type,Accept-Ranges,Content-Range,Date,Link,Location,Content-Location
Cache-Control: no-cache, no-store
Expires: -1
Pragma: no-cache
X-Request-ID: a8ed9699-20e6-462f-89ba-88501e49b312
X-Request-Cost: 10
X-Rate-Limit-Remaining: 49990
X-Rate-Limit-Reset: 33
Strict-Transport-Security: max-age=63113904
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Referrer-Policy: strict-origin-when-cross-origin
X-D2LB: 1

{
  "Errors": [
    {
      "Message": "Not Authorized"
    }
  ]
}

I checked the course and tracking is certainly enabled. The path of the course admin page is /d2l/le/completionTracking/6775/ which matches the course ID I was passing to the API call.

Tejas.M.9238 · Answer

Hello @Trevor.N.2527 ,

Thank you for reaching out to the Brightspace community. My name is Tejas, and I have been assigned to your question.

Thank you for sharing the details. Since the enrollment endpoint successfully returns data, the access token and basic enrollment access appear to be working as expected. To investigate why the completion endpoint returns 403 Forbidden, I would advise logging a support case via the ASC portal with the following details to look into this in more detail.

* The complete API call along with the version, courseId, and UserId values.
* Screenshot of the API error.
* Whether the same request succeeds when using a Super Admin account, as this will confirm whether this is only causing issues for a specific role. 
* Additionally, please confirm whether completion tracking is enabled for the course and whether the learner's completion status is visible in the Brightspace UI.

Please refer to this article for creating a support case:

https://community.d2l.com/brightspace/kb/articles/1175-approved-support-contacts-create-a-case-or-service-request

Best Regards,

Tejas Masavkar