title: instagram_graph_user_media & instagram_graph_user_profile permissions working only for test users
body: <p>I have an app that displays user's instagram media(like some of the dating apps).</p>
  
  <p>Also, my app has been <strong>reviewed successfully</strong> for permissions - <strong>instagram_graph_user_profile</strong> and <strong>instagram_graph_user_media</strong> and is <strong>in live mode</strong>.</p>
  
  <p>But in the Facebook Developer Console, the <strong>instagram icon is not turning up green</strong>.
  Please refer the screenshot.
  <a href="https://drive.google.com/open?id=1VnMHLqjTf1oRbvcm2g8Ol80AfB3JqMOg" rel="nofollow noreferrer">https://drive.google.com/open?id=1VnMHLqjTf1oRbvcm2g8Ol80AfB3JqMOg</a></p>
  
  <p>Flow to display the media is as follows.</p>
  
  <p><strong>1. My app ask users to authorize using</strong></p>
  
  <blockquote>
    <p><a href="https://api.instagram.com/oauth/authorize?client_id=instagram-app-id&amp;redirect_uri=redirect_uri&amp;scope=scope&amp;response_type=code&amp;state=state" rel="nofollow noreferrer">https://api.instagram.com/oauth/authorize?client_id=instagram-app-id&amp;redirect_uri=redirect_uri&amp;scope=scope&amp;response_type=code&amp;state=state</a></p>
  </blockquote>
  
  <p><strong>2. Above api responds with a code.Then backend calls -</strong></p>
  
  <blockquote>
    <p><a href="https://api.instagram.com/oauth/access_token" rel="nofollow noreferrer">https://api.instagram.com/oauth/access_token</a> </p>
    
    <p>with params - client_id, client_secret, code, grant_type, redirect_uri</p>
  </blockquote>
  
  <p><strong>3. Once I receive token from above API, I request long lived token from short-lived token using -</strong> </p>
  
  <blockquote>
    <p><a href="https://graph.instagram.com/access_token?grant_type=ig_exchange_token&amp;client_secret=xyz&amp;access_token=abc" rel="nofollow noreferrer">https://graph.instagram.com/access_token?grant_type=ig_exchange_token&amp;client_secret=xyz&amp;access_token=abc</a></p>
  </blockquote>
  
  <p><strong>4. Using the long lived token, server requests user info using API -</strong> </p>
  
  <blockquote>
    <p><a href="https://graph.instagram.com/me?fields=id,username&amp;access_token=abc" rel="nofollow noreferrer">https://graph.instagram.com/me?fields=id,username&amp;access_token=abc</a></p>
  </blockquote>
  
  <p><strong>5. Using the same long lived token, server makes request to get user media using API -</strong></p>
  
  <blockquote>
    <p><a href="https://graph.instagram.com/me/media?fields=id,media_type,media_url,username,caption,timestamp&amp;access_token=abc" rel="nofollow noreferrer">https://graph.instagram.com/me/media?fields=id,media_type,media_url,username,caption,timestamp&amp;access_token=abc</a></p>
  </blockquote>
  
  <p>This flow works only for <strong>test users</strong>(<em>Instagram test users who accepted invitation of being a tester in Instagram Developer Platform</em>).</p>
  
  <p>When non-test user tries to view media, on step 3, I get an error saying - </p>
  
  <blockquote>
    <p>{    "error": {
          "message": "Unsupported get request.",
          "type": "IGApiException",
          "code": 100,
          "fbtrace_id": "A0A24rNXCScki9Ck-8J_55b"    } }</p>
  </blockquote>
  
  <p>Am I missing something? </p>
  
  <p>This is how I see my Business API Settings.
  Please refer the screenshot.
  <a href="https://drive.google.com/open?id=1Dfdihf20krEcYEmoh8z43_a1T5UQStXr" rel="nofollow noreferrer">https://drive.google.com/open?id=1Dfdihf20krEcYEmoh8z43_a1T5UQStXr</a></p>
  
  <p>Under my App review section, I do not see any relevant permission that needs to be reviewed again.</p>
  
  <p><strong>Edit 1 -</strong></p>
  
  <p>Note - My app is in beta mode (not yet live on play store).
  Could this be the reason?</p>