INSUFFICIENT_ACCESS_RIGHTS

It is most used code, which covers cases when credentials is not sufficient to perform request or, for example, on attempt to get non-public data.