API returns permission denied error when sharing dashboard reports

Attempting to share dashboard reports with external stakeholders via API fails with 403 Forbidden errors, completely blocking our report access workflow. Internal users can access the dashboards fine, but external sharing through the API doesn’t work.

We’re using the API for user role management and have configured proper dashboard sharing settings, but the permission sync seems broken:


POST /api/reports/{report_id}/shares
{"email": "external@partner.com", "role": "viewer"}
Response: 403 Forbidden - "insufficient_permissions"

The API user has Admin role in the workspace, so permissions should be adequate. Is there a separate permission required for external sharing? How do we properly configure API user role management for dashboard sharing operations?

External sharing requires workspace-level configuration to be enabled first. Check your workspace settings - there’s a toggle for ‘Allow external sharing’ that must be enabled before the API will accept external email addresses. By default, Mode workspaces restrict sharing to users within the same organization domain.