---
title: "How to deal with vs30063 error."
canonical: "https://support.appfire.com/space/SUPPORT/153453561/How%20to%20deal%20with%20vs30063%20error."
format: markdown
---
**Symptoms:**

> ❌ ERROR SpartezSoftware.Synchronizer.Services.SyncProfileService - VS30063: You are not authorized to access [https://YOUR_AZURE_DEVOPS_INSTANCE](https://YOUR_AZURE_DEVOPS_INSTANCE)
> ❌ 
> ❌ Microsoft.VisualStudio.Services.Common.VssUnauthorizedException: VS30063: You are not authorized to access

## **Possible Reasons and solutions:**

#### **Not enough permissions set up for users. **

TFS4JIRA Requires a set of permissions which we have listed here:[https://appfire.atlassian.net/wiki/display/TFS4JIRA/Permissions+needed+by+TFS4JIRA+Synchronizer](https://appfire.atlassian.net/wiki/display/TFS4JIRA/Permissions+needed+by+TFS4JIRA+Synchronizer) and be in the Contributors or Project Admin group.

#### Personal Acces Token does not have enough access scope

Go there and near your account, there should be a user settings dropdown:

![image](media://0c6e86e7-10df-43b0-b23d-4e964ec307e0)

go to Personal Access Tokens and choose your token used for TFS4JIRA and click edit:

![image](media://9e6ea4ae-ee11-4497-a9f1-2cb19ad0ea94)

then there should be the scope:

![image](media://e0379a13-8ff4-4f2e-bd34-726add7f888a)

From our tests it seems that those are required permission:

- **Graph - **Read, group, scope, and add

![image](media://0313afbf-694f-48ab-9fd3-e1e61c4293b9)

- **Identity**  
Identities and groups

![image](media://f59e1671-c438-4279-880b-7f9732e7393e)

- **User Profile**  
Write to profile

![image](media://21710521-a9fe-467d-9570-c3dd8446a3b5)

- **Work Items**  
Work items, queries, backlogs, plans, and metadata

![image](media://5aed66e7-5bf6-4f43-b4a8-c1710ba0aaee)

  
The one that was the most elusive is the **Graph **🙂