Sorry me too, you're asking for too many permissions, why not just read-only if it's auth only?