The key authenticated but may not do what was asked: on a read, the request names a field this key may not read (sensitive, personal or pay data). 403.
OPDC API error code
FORBIDDEN
HTTP status 403
The API answers with a problem document (RFC 9457) whose type is https://twinn.engineering/errors/forbidden, and with X-Error-Code: FORBIDDEN. Branch on the code, never on the detail text.