Token lacks a permission

Each API token is limited to the permissions chosen when it was made, and this request needs one the token doesn't have.