API access perimissions for fulfillment orders

Topic summary

A developer is encountering a 403 Forbidden error when attempting to access the fulfillment orders endpoint (/admin/api/2024-01/orders/{order_id}/fulfillment_orders.json) using an API client with cURL.

Error Details:

  • Error message: “The api_client does not have the required permission(s)”
  • Access method: Direct API client (not app-based)
  • User role: Collaborator with “All” permissions set

Key Question:
The developer is seeking clarification on how to obtain the necessary permissions for this endpoint—specifically whether this requires action from the parent store owner or if it can be configured independently.

Status: The issue remains unresolved with no responses or solutions provided yet.

Summarized with AI on November 11. AI used: claude-sonnet-4-5-20250929.

I searched the discussions for my problem but did not find anything conclusive.

I am trying to access the end point: “/admin/api/2024-01/orders/450789469/fulfillment_orders.json”

I get the error message: “The api_client does not have the required permission(s).”

The store of which I am a collaborator has my collaborator permissions set to “All”

How can I get permissions to access the end point above? Does my parent store need to this or is this something i can do?

This access is not associated with any app - I am using an api client with curl access.

Below is the returned header with which the access fails:

HTTP/1.1 403 Forbidden
Date: Fri, 08 Mar 2024 14:27:44 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: close
X-Sorting-Hat-PodId: 279
X-Sorting-Hat-ShopId: 70956351768
Vary: Accept-Encoding
referrer-policy: origin-when-cross-origin
x-frame-options: DENY
x-shopid: 70956351768
x-shardid: 279
x-stats-userid:
x-stats-apiclientid: 39853948929
x-stats-apipermissionid: 504130273560
x-shopify-api-terms: By accessing or using the Shopify API you agree to the Shopify API License and Terms of Use at https://www.shopify.com/legal/api-terms
x-shopify-api-version: 2024-01
http_x_shopify_shop_api_call_limit: 1/40
x-shopify-shop-api-call-limit: 1/40
strict-transport-security: max-age=7889238
x-request-id: ac069618-cc94-4a78-87db-b50bfda10a44-1709908064
server-timing: processing;dur=58

And below is the returned json:

{“errors”:“The api_client does not have the required permission(s).”}