“You don't have access to this surface”
The screen opened, but instead of the content you see a lock and a missing key. You don't hold that key in this scope; the screen also says who can grant it.
For: Platform administrator, Builder, Account administrator, Tenant administrator, Operator, Auditor, Member
Symptom
- The screen shows a lock and a line such as “You don't have access to this surface:
capability.read(tenant)”. - Below it, it says “The tenant administrator can grant this permission.” (or the account administrator, or the platform administrator).
- Sometimes part of the screen is visible and only the action area shows this line.
Cause
- You have no role assignment that grants the key shown, in the scope in parentheses (platform, account or tenant).
- Reading and changing are separate keys: being able to see the list (
read) is not enough to add to it (write). - A group appearing in the menu does not mean you hold the key for every section in that group.
Fix
- Note the key and the scope on the line.
- On the My Access screen, select that scope and confirm the key is not in the list.
- Ask the administrator named on the screen for a role that carries this key. Which archetype carries which key is written in the permission glossary.