Help Center/ Content Delivery Network/ Troubleshooting/ Why Am I Getting a Permission Error Message?
Updated on 2024-06-06 GMT+08:00

Why Am I Getting a Permission Error Message?

Perform the following steps:

  1. If you are using CDN as an IAM user with insufficient permissions, view each permission on Permissions Management and ask the account administrator to assign the required permissions to you by referring to Creating a User and Granting CDN Permissions.
    The following table lists the common CDN permissions.

    Policy

    Description

    Type

    CDN Administrator

    All operations on CDN.

    Scope: Global-level service

    System role

    CDN DomainReadOnlyAccess

    Read-only permissions on CDN acceleration domain names.

    Scope: Global-level service

    System-defined policy

    CDN StatisticsReadOnlyAccess

    Read-only permissions on CDN statistics.

    Scope: Global-level service

    NOTE:

    This policy does not include the permissions for querying operations reports.

    System-defined policy

    CDN LogsReadOnlyAccess

    Read-only permissions on CDN logs.

    Scope: Global-level service

    System-defined policy

    CDN DomainConfiguration

    Permissions for configuring CDN acceleration domain names.

    Scope: Global-level service

    System-defined policy

    CDN RefreshAndPreheatAccess

    Permissions for configuring CDN cache refreshing and preheating.

    Scope: Global-level service

    System-defined policy

    CDN FullAccess

    All operations on CDN.

    Scope: Global-level service

    System-defined policy

    CDN ReadOnlyAccess

    All read-only operations on CDN.

    Scope: Global-level service

    System-defined policy

    When you want to acquire the CDN DomainConfiguration or CDN RefreshAndPreheatAccess permission, ensure that you also acquire the CDN DomainReadOnlyAccess permission. Otherwise, you cannot view the domain names, and thus cannot configure, or purge or prefetch cache for domain names.

  2. Check whether your account has outstanding payments.
    • If your account has outstanding payments and is in the retention period, the system will disable CDN for your domain names and stop the acceleration service.
    • If your account has outstanding payments and the retention period expires, CDN will delete your domain names.