Error Codes

401

Organizations.1001

This operation can be called only from the management account of an organization.

Failed to verify permissions.

Check whether the API is called by the management account.

401

Organizations.1002

This operation can be called only from the management account of an organization or by a member account that is a delegated administrator for a service.

Failed to verify permissions.

Check whether the API is called by the management account or the account registered as a delegated administrator.

409

Organizations.1003

Concurrent modification.

Concurrent modification.

Try again later.

400

Organizations.1004

Bad request for generating Organizations service management token.

An error occurred when generating the administrator token.

Try again later. If the operation fails again, contact the administrator.

400

Organizations.1005

Bad request for querying cbc em info.

Failed to query the enterprise accounts.

Check whether the account is the master account or a member account of the enterprise.

400

Organizations.1006

Bad request for generating assume-role token.

Failed to upgrade the permission.

Try again later. If the operation fails again, contact the administrator.

403

Organizations.1007

Policy does not allow '{0}' to be performed.

Fine-grained authentication failed.

Check whether the user has the access permission.

400

Organizations.1008

Bad request for checking permission.

Bad request for a fine-grained authentication.

Contact the administrator.

400

Organizations.1009

Bad request for impersonating.

Bad request for a role switching.

Contact the administrator.

404

Organizations.1010

HTTP header not found.

Request header not found.

Check whether all request headers required for calling the API are available.

400

Organizations.1011

Bad request for invalid user profile.

Bad request for invalid user profile.

Contact the administrator.

400

Organizations.1012

Bad request for invalid context attributes.

Bad request for invalid context attributes.

Contact the administrator.

400

Organizations.1013

Bad request for invalid marker.

Invalid marker.

Enter a valid marker value.

400

Organizations.1014

Bad request for request proof.

Invalid proof request header.

Ensure that proof request header is valid.

401

Organizations.1015

This operation can be called from any account in the organization.

Failed to verify permissions.

Check whether the API is called by a member account.

400

Organizations.1016

Bad request for domain tags.

Failed to obtain tags.

Contact the administrator.

400

Organizations.1017

Bad request for getting projects.

Failed to obtain information about the project.

Contact the administrator.

401

Organizations.1018

This operation can be called only from the organization's member account.

Failed to verify permissions.

Check whether the API is called by a member account.

400

Organizations.1019

Bad request for querying IAM domain info.

Failed to obtain the user information.

Contact the administrator.

400

Organizations.1020

SSL check failed.

Failed to verify the certificate.

Contact the administrator.

400

Organizations.1021

Bad request for authorization header pattern.

Invalid token request header.

Ensure that authorization request header is valid.

400

Organizations.1022

Bad request for querying the restricted list.

Failed to query the restricted list.

Contact the administrator.

400

Organizations.1023

Bad request for querying the frozen list.

Failed to query the frozen list.

Contact the administrator.

404

Organizations.1100

Organization not found.

Organization not found.

Check whether the Organizations service is enabled for the current account.

409

Organizations.1101

Conflict for creating an organization. This account is already a member of an organization.

A conflict occurred when creating an organization.

Check whether the current account is already a member account of the organization.

400

Organizations.1102

To delete the organization, you must first remove all member accounts, all organizational units, and all policies.

Failed to delete an organization.

Check whether all member accounts, OUs, and policies have been removed from the organization.

400

Organizations.1103

Failed to create an organization. Only for the enterprise master account.

Failed to create an organization (for the enterprise master account).

Check whether the current account is the master enterprise account.

403

Organizations.1104

The current operation has been restricted.

The operation is restricted and access is not allowed.

Check whether the account is restricted.

403

Organizations.1105

The current operation has been frozen.

The operation is frozen and access is not allowed.

Check whether the account is frozen.

404

Organizations.1200

Organizational unit not found.

OU not found.

Check whether the OU is available.

404

Organizations.1201

A root or organizational unit with the ParentId not found.

Root or OU not found based on a parent OU ID.

Check whether the parent OU ID is available.

400

Organizations.1202

The organizational unit is not empty.

OU not empty

Check whether the OU is empty of accounts and child OUs.

400

Organizations.1203

Quota exceeded for an organizational unit tree level.

Maximum levels for an OU exceeded.

Check whether the levels for an OU exceed the maximum allowed.

400

Organizations.1204

Quota exceeded for organizational unit.

Maximum number of OUs exceeded.

Check whether the number of OUs exceeds the maximum allowed.

409

Organizations.1205

Conflict for organizational unit. An organizational unit name must be unique within a parent organizational unit.

Duplicate OU names.

Check whether each OU name is unique under its parent OU.

404

Organizations.1300

Account not found.

Account not found.

Check whether the account is valid.

404

Organizations.1301

Account creation status not found.

Account creation status not found.

Check whether the input create_account_status_id is correct.

400

Organizations.1302

Bad request for wrong source parent id.

Incorrect source_parent_id.

Check whether the input source_parent_id is correct.

400

Organizations.1303

Bad request for wrong destination parent id.

Incorrect destination_parent_id.

Check whether the input destination_parent_id is correct.

400

Organizations.1304

The management account of the organization or the organization administrator cannot leave an organization.

Management account or administrator account not allowed to leave an organization.

Check whether the account that attempts to leave an organization is the management account or administrator account of the organization.

400

Organizations.1305

Quota exceeded for account.

Maximum number of accounts in an organization exceeded.

Check whether the number of accounts in the organization exceeds the maximum.

409

Organizations.1306

This account is already a member of an organization. An account can belong to only one organization at a time.

Account already being a member of an organization.

Check whether the account is already a member of the organization.

409

Organizations.1307

This account is already invited.

Account already invited.

Check whether the account has been invited.

400

Organizations.1308

Accounts cannot be invited (only for enterprise member accounts).

Accounts cannot be invited (only for enterprise member accounts).

Check whether the account is a member account of the master account used by the organization administrator.

400

Organizations.1309

This account cannot be invited because it is at a site different from your organization.

The account cannot be invited because it is at a site different from the current organization.

Ensure that the management account and the invited account are at the same site.

400

Organizations.1310

This account cannot be invited because its type is currently not supported.

This account cannot be invited because its type is currently not supported.

Ensure that the account is a member account.

404

Organizations.1400

Handshake not found.

Handshake not found.

Check whether the handshake is correct.

400

Organizations.1401

Bad request for wrong handshake status. This operation can only be performed to a pending handshake.

Incorrect handshake state (This operation should be performed only when the handshake is in the pending state).

Check whether the handshake state is the required one.

400

Organizations.1402

Quota exceeded for cancelled handshake per day.

Daily handshake cancellations exceeding the maximum.

Check whether the number of daily attempts to cancel handshakes exceeds the maximum.

404

Organizations.1500

Delegated administrator not found.

Delegated administrator not found.

Check whether there is a delegated administrator.

409

Organizations.1501

Conflict for delegated administrator.

Delegated administrators in conflict.

Check whether there is already a delegated administrator.

404

Organizations.1600

Policy not found.

Policy not found.

Check whether the policy is available.

404

Organizations.1601

Policy attachment not found.

Policy not attached.

Check whether the policy is attached to any principal.

404

Organizations.1602

Policy attachment entity not found.

Principal not available for policy attachment.

Check whether the principal to which the policy will be attached is available.

409

Organizations.1603

Conflict for policy attachment.

Conflict for policy attachment.

Check whether the policy has been attached to the principal.

400

Organizations.1604

Bad request for existing policy attachment.

No principal attached to the policy.

Check whether the policy is attached to any principal.

400

Organizations.1605

Bad request for modifying a built-in policy.

Modification not allowed for a built-in policy.

Check whether the policy you are modifying is a built-in policy.

400

Organizations.1606

Policy quota exceeded.

Maximum number of policies exceeded.

Check whether the number of attempts to create policies exceeds the maximum.

400

Organizations.1607

Quota exceeded for service control policy per entity.

Maximum number of policies attached to a principal exceeded.

Check whether the number of policies attached to the principal exceeds the maximum.

400

Organizations.1608

Wrong format for policy content.

Invalid policy format.

Check whether the format of the policy content is correct.

404

Organizations.1609

Root not found.

Root not found.

Check whether the ID of the root is correct.

404

Organizations.1610

Root policy type not found.

Policy type of the root OU not found.

Check whether the input parameter is correct.

400

Organizations.1611

Bad request for wrong root policy type status.

Incorrect state of the policy type for the root OU.

Check whether the input parameter is correct.

409

Organizations.1612

Policy conflict. The policy name must be unique within an organization.

Duplicate policy names found in the same organization.

Check whether the policy name is unique in the organization.

400

Organizations.1613

Bad request for service control policy disabled.

Service control policy disabled.

Check whether the service control policy is disabled.

400

Organizations.1614

Detaching the last policy not allowed.

Detaching the last policy not allowed.

Check whether the policy to be detached is the last one for the principal.

400

Organizations.1615

The policy name does not allow all space.

Policy name cannot contain only white spaces

Check whether the policy name is valid.

400

Organizations.1616

Policy changes in progress.

Policy being modified.

Try again later.

400

Organizations.1617

Scheduler runtime exception.

Failed to enable or disable the policy type.

Try again later.

400

Organizations.1618

Policy type not supported.

The policy type is not supported.

Check whether the policy type is correct.

400

Organizations.1619

You provided a string parameter that is longer than allowed.

The parameter length exceeds the allowed limit.

Enter a maximum of 5120 characters.

404

Organizations.1700

Tag not found.

Tag not found.

Check whether the tag is available.

404

Organizations.1701

Resource with the tag not found.

Resource with the tag not found.

Check whether the resource which the tag is attached is available.

409

Organizations.1702

Tag conflict.

Tag already exists.

Check whether the resource already has the tag.

400

Organizations.1703

Tag quota exceeded.

Tag quota exceeded.

Check whether the number of tags exceeds the maximum allowed on the resource.

400

Organizations.1800

Invalid quota value.

Invalid quota value.

Check whether the input quota value is correct.

404

Organizations.1900

Trusted service not found.

Trusted service not found.

Check whether the input parameter is correct.

409

Organizations.1901

Conflict for trusted service.

Conflict for trusted service.

Check whether the trusted service already exists.

400

Organizations.1902

Delegated administrator is not empty for this service.

The delegated administrator is not specified.

Specify a delegated administrator for the current service.

400

Organizations.2000

Bad request for creating the service-linked agency.

Failed to create the service-linked agency.

Check whether the input parameter is correct.

400

Organizations.2001

Bad request for missing app_name.

App name missing.

Check whether the app name is missing.

409

Organizations.2002

Conflict for the service-linked agency. It is already created.

Conflict for the service-linked agency.

Check whether the service-linked agency already exists.

400

Organizations.2003

Bad request for deleting the service-linked agency.

Failed to delete the service-linked delegated administrator.

Check whether the input parameter is correct.

404

Organizations.2004

Service-linked agency not found.

Service-linked agency not found.

Check whether there is a service-linked agency.

404

Organizations.2005

Service request for service_principal not found.

App name not found.

Check whether the app name is correct.

400

Organizations.2006

Bad request for authorization header. JWT token is malformed.

JWT token malformed.

Check whether the JSON Web Token (JWT) token is correct.

400

Organizations.2100

Either parent OU ID or child OU ID should be provided.

Either parent OU ID or child OU ID required.

Verify that either parent OU ID or child OU ID is provided.

409

Organizations.2101

Service conflict. The names of service_principal and app_name must be unique.

Conflict for service_principal or app_name.

Check whether service_principal or app_name already exists.

404

Organizations.2102

Service not found.

Service not found.

Check whether the input service_principal is correct.

400

Organizations.2103

Bad request for listing the service principal.

Failed to obtain the service_principal.

Check whether the input parameter is correct.

404

Organizations.2104

Entity not found.

Entity not found.

Check whether the principal ID is correct. If the principal is newly created, try again later.

400

Organizations.2105

Policy type is invalid.

The policy type is invalid.

Check the policy type (tag_policy).

404

Organizations.2106

Service principal from IAM not found. It must be registered with IAM.

service_principal not registered with IAM.

Check whether service_principal has been registered with IAM.

400

Organizations.2200

Time format or range error.

Incorrect time format or range.

Check whether the input parameter is correct.

400

Organizations.2201

Bad request for changing customer relation.

Failed to change account association.

Contact the administrator.

400

Organizations.2202

The relation of domain ID has been changed too many times.

Master-member account associations have been changed too many times.

Do not frequently change the master-member account associations. (A member account is allowed to change its association with the master account for ten times or less per month.)

403

Organizations.2007

Bad Request: {0}.

Failed to create the service-linked agency.

Check whether the required permission is granted based on the error cause.