The documentation should state that saganCreateRelease saganDeleteRelease from Update version on project page require the read:org scope as documented in https://spring.io/restdocs/index.html#authentication