How Do I Do If an Error Indicating Invalid Authentication Is Reported When I Submit an MRS Cluster Purchase Order?

Symptom

When I submit an order for buying an MRS cluster, an error message is displayed, indicating that the authentication is invalid. After I press F12 to view the network request, error code 401 is displayed.

Troubleshooting

1. Check the backend API request logs. The alarm information is as follows: IAM users have not been assigned the mrs:cluster:create permission in the fine-grained policy.
2. IAM users on the customer side belong to multiple user groups, and different default MRS policies are assigned to these user groups. Low-permission policies are preferentially matched. This policy does not contain the mrs:cluster:create permission. As a result, the cluster creation operation cannot be submitted, and error 401 is reported.
3. After the user is removed from the user group corresponding to the low-permission policy, the cluster purchase order can be submitted.