Help Center/ CodeArts Agent/ FAQs/ Account and Permission Management/ How Do I Handle the Error 403 "Insufficient permissions. Contact your account administrator to assign you a policy with the devcloud:monthlyPackage:subscribe action."?
Updated on 2026-07-29 GMT+08:00
View PDF
Share

How Do I Handle the Error 403 "Insufficient permissions. Contact your account administrator to assign you a policy with the devcloud:monthlyPackage:subscribe action."?

Symptom

When you enable CodeArts Agent packages or pay-per-use billing as an IAM user, the error message "Insufficient permissions. Contact your account administrator to assign you a policy with the devcloud:monthlyPackage:subscribe action." is displayed in the upper right corner.

Cause Analysis

The current IAM user has not been granted the fine-grained permission to purchase CodeArts Agent.

Solution

  1. Log in to the Identity and Access Management (IAM) console using your HUAWEI ID.
  2. Create and configure a custom policy for enabling CodeArts Agent packages or pay-per-use billing.

    1. In the navigation pane on the left, choose Permissions > Policies/Roles. The Policies/Roles page is displayed.
    2. Click Create Custom Policy in the upper right corner.
    3. Set the custom policy by referring to Table 1.
      Figure 1 Creating a custom policy
      Table 1 Custom policy parameters

      Parameter

      Description

      Policy Name

      Enter a policy name. Only letters, digits, spaces, and the following special characters are allowed: -_.,

      Policy View

      Select Visual editor.

      Policy Content

      Configure the DevCloud permission as follows. Only this permission is required for enabling or disabling pay-per-use billing.

      1. Select Allow.
      2. Cloud service: Enter devcloud in the search box and select CodeArts (DevCloud).
      3. Actions: Enter monthly in the search box and select devcloud:monthlyPackage:subscribe and devcloud:monthlyPackage:listResourceDetail.
      4. Skip Select resource.
      5. Skip (Optional) Add request condition.

      To enable CodeArts Agent packages, you also need to configure the BSS permission as follows:

      1. Click Add Permissions.
      2. Select Allow.
      3. Cloud service: Enter bss in the search box and select BSS (BSS).
      4. Actions: Enter order in the search box and select bss:order:pay and bss:order:view.
      5. Skip Select resource.
      6. Skip (Optional) Add request condition.

      Description

      Optional. Enter a brief description for the policy.
    4. Click OK. The custom policy is created.

      On the Policies/Roles page, view the new policy.

  3. Add the IAM user who needs to enable CodeArts Agent packages or pay-per-use billing to a user group. If the user has been added to a user group, skip this step and go to 4.

    1. In the navigation pane on the left, choose User Groups.
    2. Click Create User Group in the upper right corner.
    3. Set the user group name and click OK.

      The user group name consists of letters, digits, spaces, hyphens (-), and underscores (_).

    4. On the User Groups page, locate the target user group, and click Manage User in the Operation column.
    5. Select the target IAM user, and click OK.

  4. Assign the permissions of the custom policy to the user group.

    1. On the User Groups page, locate the target user group, and click Authorize in the Operation column.
    2. In the search box, enter the custom policy name configured in 2. Locate and select the policy. Click Next.
    3. Click OK. An information dialog box is displayed.
    4. Click OK. A message is displayed, indicating that the authorization is successful. Click Finish.

  5. Log in to the CodeArts Agent console as the authorized IAM user and enable CodeArts Agent packages or pay-per-use billing again.
Parent Topic: Account and Permission Management