Permissions issues with customer_read_customers in account UI extension

Topic summary

A developer is encountering permission errors when trying to fetch logged-in customer data using a customer account UI extension, despite following official Shopify documentation.

Configuration in place:

  • customer_read_customers scope added to shopify.app.toml
  • Scope visible in Partner Dashboard
  • api_access = true and network_access = true set in shopify.extension.toml

Problem:

  • Permission errors persist in both frontend and GraphQL queries
  • GraphQL should display access scopes but returns nothing
  • The app is public but not yet released

Resolution:
The developer resolved the issue by uninstalling and reinstalling the app, suggesting the scope changes weren’t properly applied until a fresh installation.

Summarized with AI on November 7. AI used: claude-sonnet-4-5-20250929.

Following the example here to fetch data about the logged in customer from a new customer account UI compnent:

https://shopify.dev/docs/api/customer-account-ui-extensions/unstable/apis/customer-account-api

I’ve got the customer_read_customers scope in shopify.app.toml and I’m also seeing it in the partner dashboard, and I have api_access = true and network_access = true in shopify.extension.toml

It’s a public app that’s not released yet.

In both the frontend and in graphiql I’m still hitting the permissions error:

Additionally, I saw it mentioned here that you should be able to see your access scopes in graphql, but that’s not returning anything for me:

You need to uninstall and reinstall the app.

1 Like