«The operation was not allowed by the active policy or by your permissions.» (forbidden)

Symptom

An action is refused with «The operation was not allowed by the active policy or by your permissions.», «This area requires an active administrator account.» or «The account no longer has administrator permissions.» The API answers 403 forbidden.

Cause

• Your account lacks the role or permission needed (for example it is a «Member» and tried to administer).
• Another administrator removed your administrator role during the session.
• The organization requires a different factor for this operation.
• The recent confirmation expired and the console showed the generic message.
• The access policy refused the operation.

Fix

1. Check with another administrator that your account has the «Administrator» role and is active.
2. Sign in again with your passkey (a new session refreshes permissions and the recent confirmation).
3. Repeat the operation.
4. If the operation is an approval or an access, review the policy with your administrator.

When to escalate

If your role is right, you signed in with a passkey and the same operation is still refused, contact support with the time, the console view and the exact message.