How can I resolve the USER_LACKS_PERMISSIONS error when using Docusign Connector in Workato?

Question

I am using the Docusign Connector in Workato and want to be able to use the action Send document using a template as part of my recipe. When I add that action though, I get an error:

Something went wrong
{ "errorCode": "USER_LACKS_PERMISSIONS", "message": "This user lacks sufficient permissions to access this resource." }

See the error in Workato here:

I searched the docusign website and found this article that looked promising: https://support.docusign.com/en/articles/DocuSign-Developer-FAQs-General-Administration-and-Authentication#User-Lacks-Permission-Error

The article says to enable the Allow sender to download form data setting which I have done but it has made no difference.

I believe the error is occuring because the Workato Connector is trying to download a list of the templates available and it is that REST call that is failing. Are there any other settings that would affect this that I should change in my admin config? Does anyone know why this issue might be occuring?

My Docusign account is an admin account and I can see all of the templates in our organisation when viewing via the Docusign web portal.

Thanks for any assistance that can be provided

Answer 1

The solution I have taken for this was to create a new user specifically for the integration I was trying to set up. The new user is NOT a DS-Admin user and was only granted USE template permissions in the user permissions. This user works with the integration and is what I will proceed with.

Answer 2

Update: make sure the production user has the full permission to read templates, you claim this is an administrator user, can you confirm this?

You cannot mix up production and demo (developer) account information. If you use a user from one environment, even if the email and password and name and all is the same - it's completely different in DocuSign. The one cannot access the other. You will need to have everything moved to your production account if you want to use this. Meaning the template has to be moved to your production account and the correct templateID from production (not the same!) would be used.