A section is in the menu but opens locked
You opened a section you see in the menu and the screen showed a lock and “You don't have access to this surface”. The menu group is open to you; that section's key is not.
For: Tenant administrator, Account administrator, Platform administrator, Builder, Operator, Auditor
What happened
There is a section in the menu on the left and you clicked it. The screen opened, but instead of content it shows a lock and a line such as “You don't have access to this surface: role.read (tenant)”, with “A tenant admin can grant this permission.” below it.
Why it happens
The menu is filtered by group: a group (Governance, Studios…) appears when you hold its entry key and at least one action key, and all of that group's sections are listed. But each section asks for its own key as well. Having access to one section of a group does not mean you have access to its other sections.
What inlorus does
- It does not hide the screen: concealing a screen that could be open to you would turn a permission problem into an error.
- It states the missing key and the scope, and says who can grant the permission.
- It does not redirect you anywhere; you stay on the screen you are on.
What you do
- Note the key and scope shown on the screen, for example
membership.read(tenant). - On the My Access screen, pick that scope and confirm you don't hold this key.
- Pass the key and scope to the person named (tenant, account or platform admin) and ask for a role that carries that key.
How to keep it from happening again
- When giving someone a role, think about what they will do: the permission vocabulary shows which archetype carries which key.
- Give the person doing a job that job's key, in the scope where the job is done.