Error Codes

401

Organizations.1001

This operation can be called only from the management account of an organization.

Failed to verify permissions.

Check whether the API is called by the management account.

401

Organizations.1002

This operation can be called only from the management account of an organization or by a member account that is a delegated administrator for a service.

Failed to verify permissions.

Check whether the API is called by the management account or the account registered as a delegated administrator.

409

Organizations.1003

Concurrent modification.

Concurrent modification

Try again later.

400

Organizations.1004

Bad request for generate organizations service management token.

An error occurred when generating the administrator token.

Try again later. If the operation fails again, contact the administrator.

400

Organizations.1005

Bad request for query cbc em info.

Failed to query the enterprise accounts.

Check whether the account is the master account or a member account of the enterprise.

400

Organizations.1006

Bad request for generate assume-role token.

Failed to upgrade the permission.

Try again later. If the operation fails again, contact the administrator.

403

Organizations.1007

Policy doesn't allow '{0}' to be performed.

Fine-grained authentication failed.

Check whether the user has the access permission.

400

Organizations.1008

Bad request for checking permission.

Bad request for a fine-grained authentication.

Contact the administrator.

400

Organizations.1009

Bad request for impersonate.

Bad request for a role switching.

Contact the administrator.

404

Organizations.1010

Not found for http header.

Request header not found.

Check whether all request headers required for calling the API are available.

400

Organizations.1011

Bad request for invalid user profile.

Bad request for invalid user profile.

Contact the administrator.

400

Organizations.1012

Bad request for invalid context attributes.

Bad request for invalid context attributes.

Contact the administrator.

400

Organizations.1013

Bad request for invalid marker.

Invalid marker.

Enter a valid marker value.

400

Organizations.1014

Bad request for request proof.

Invalid proof request header.

Ensure that proof request header is valid.

401

Organizations.1015

This operation can be called from any account in the organization.

Failed to verify permissions.

Check whether the API is called by a member account.

400

Organizations.1016

Bad request for domain tags.

Failed to obtain tags.

Contact the administrator.

400

Organizations.1017

Bad request for get projects.

Failed to obtain information about the project.

Contact the administrator.

401

Organizations.1018

This operation can be called only from the organization's member account.

Failed to verify permissions.

Check whether the API is called by a member account.

400

Organizations.1019

Bad request for query iam domain info.

Failed to obtain the user information.

Contact the administrator.

400

Organizations.1020

SSL check failed.

Failed to verify the certificate.

Contact the administrator.

400

Organizations.1021

Bad request for authorization header pattern.

Invalid token request header.

Ensure that authorization request header is valid.

400

Organizations.1022

Bad request for query restricted list.

Failed to query the restricted list.

Contact the administrator.

400

Organizations.1023

Bad request for query frozen list.

Failed to query the frozen list.

Contact the administrator.

404

Organizations.1100

Not found for organization.

Organization not found.

Check whether the Organizations service is enabled for the current account.

409

Organizations.1101

Conflict for create organization, this account is already a member of an organization.

A conflict occurred when creating an organization.

Check whether the current account is already a member account of the organization.

400

Organizations.1102

Deletes the organization, you must first remove all member accounts and all organizational units and all policies.

Failed to delete an organization.

Check whether all member accounts, OUs, and policies have been removed from the organization.

400

Organizations.1103

Can not create organization, only for primary account of EM.

Failed to create an organization (for the enterprise master account).

Check whether the current account is the master enterprise account.

403

Organizations.1104

The current operation has been restricted.

The operation is restricted and access is not allowed.

Check whether the account is restricted.

403

Organizations.1105

The current operation has been frozen.

The operation is frozen and access is not allowed.

Check whether the account is frozen.

404

Organizations.1200

Not found for organizational unit.

OU not found.

Check whether the OU is available.

404

Organizations.1201

Not found for a root or organizational unit with the ParentId.

Root or OU not found based on a parent OU ID.

Check whether the parent OU ID is available.

400

Organizations.1202

The organizational unit is not empty.

OU not empty

Check whether the OU is empty of accounts and child OUs.

400

Organizations.1203

Quota exceeded for an organizational unit tree level.

Maximum levels for an OU exceeded.

Check whether the levels for an OU exceed the maximum allowed.

400

Organizations.1204

Quota exceeded for organizational unit.

Maximum number of OUs exceeded.

Check whether the number of OUs exceeds the maximum allowed.

409

Organizations.1205

Conflict for organizational unit, an organizational unit names must be unique within a parent.

Duplicate OU names.

Check whether each OU name is unique under its parent OU.

404

Organizations.1300

Not found for account.

Account not found.

Check whether the account is valid.

404

Organizations.1301

Not found for create account status.

Account creation status not found.

Check whether the input create_account_status_id is correct.

400

Organizations.1302

Bad request for wrong source parent id.

Incorrect source_parent_id.

Check whether the input source_parent_id is correct.

400

Organizations.1303

Bad request for wrong destination parent id.

Incorrect destination_parent_id.

Check whether the input destination_parent_id is correct.

400

Organizations.1304

The management account of the organization or the organization administrator could not leave organization.

Management account or administrator account not allowed to leave an organization.

Check whether the account that attempts to leave an organization is the management account or administrator account of the organization.

400

Organizations.1305

Quota exceeded for account.

Maximum number of accounts in an organization exceeded.

Check whether the number of accounts in the organization exceeds the maximum.

409

Organizations.1306

This account is already a member of an organization. An account can belong to only one organization at a time.

Account already being a member of an organization.

Check whether the account is already a member of the organization.

409

Organizations.1307

This account is already invited.

Account already invited.

Check whether the account has been invited.

400

Organizations.1308

Can not invite account, only for sub-account of EM.

Accounts cannot be invited (only for enterprise member accounts).

Check whether the account is a member account of the master account used by the organization administrator.

400

Organizations.1309

This account cannot be invited because it is at a site different from your organization.

The account cannot be invited because it is at a site different from the current organization.

Ensure that the management account and the invited account are at the same site.

400

Organizations.1310

This account cannot be invited because its type is currently not supported.

This account cannot be invited because its type is currently not supported.

Ensure that the account is a member account.

404

Organizations.1400

Not found for handshake.

Handshake not found.

Check whether the handshake is correct.

400

Organizations.1401

Bad request for wrong handshake status, this operation can only be applied to a pending handshake.

Incorrect handshake state (This operation should be performed only when the handshake is in the pending state).

Check whether the handshake state is the required one.

400

Organizations.1402

Quota exceeded for cancelled handshake per day.

Daily handshake cancellations exceeding the maximum.

Check whether the number of daily attempts to cancel handshakes exceeds the maximum.

404

Organizations.1500

Not found for delegated administrator.

Delegated administrator not found.

Check whether there is a delegated administrator.

409

Organizations.1501

Conflict for delegated administrator.

Delegated administrators in conflict.

Check whether there is already a delegated administrator.

404

Organizations.1600

Not found for policy.

Policy not found.

Check whether the policy is available.

404

Organizations.1601

Not found for policy attachment.

Policy not attached.

Check whether the policy is attached to any principal.

404

Organizations.1602

Not found for policy attachment entity.

Principal not available for policy attachment.

Check whether the principal to which the policy will be attached is available.

409

Organizations.1603

Conflict for policy attachment.

Conflict for policy attachment.

Check whether the policy has been attached to the principal.

400

Organizations.1604

Bad request for existing policy attachment.

No principal attached to the policy.

Check whether the policy is attached to any principal.

400

Organizations.1605

Bad request for modify builtin policy.

Modification not allowed for a built-in policy.

Check whether the policy you are modifying is a built-in policy.

400

Organizations.1606

Quota exceeded for policy.

Maximum number of policies exceeded.

Check whether the number of attempts to create policies exceeds the maximum.

400

Organizations.1607

Quota exceeded for service control policy per entity.

Maximum number of policies attached to a principal exceeded.

Check whether the number of policies attached to the principal exceeds the maximum.

400

Organizations.1608

Wrong format for policy content.

Invalid policy format.

Check whether the format of the policy content is correct.

404

Organizations.1609

Not found for root.

Root not found.

Check whether the ID of the root is correct.

404

Organizations.1610

Not found for root policy type.

Policy type of the root OU not found.

Check whether the input parameter is correct.

400

Organizations.1611

Bad request for wrong root policy type status.

Incorrect state of the policy type for the root OU.

Check whether the input parameter is correct.

409

Organizations.1612

Conflict for policy, policy names must be unique within an organization.

Duplicate policy names found in the same organization.

Check whether the policy name is unique in the organization.

400

Organizations.1613

Bad request for service control policy disabled.

Service control policy disabled.

Check whether the service control policy is disabled.

400

Organizations.1614

The last policy not allow detach.

Detaching the last policy not allowed.

Check whether the policy to be detached is the last one for the principal.

400

Organizations.1615

The policy name not allow all space.

Policy name cannot contain only white spaces

Check whether the policy name is valid.

400

Organizations.1616

Policy changes in progress.

Policy being modified.

Try again later.

400

Organizations.1617

Scheduler runtime exception.

Failed to enable or disable the policy type.

Try again later.

400

Organizations.1618

Not supported policy type.

The policy type is not supported.

Check whether the policy type is correct.

400

Organizations.1619

You provided a string parameter that is longer than allowed.

The parameter length exceeds the allowed limit.

Enter a maximum of 5120 characters.

404

Organizations.1700

Not found for tag.

Tag not found.

Check whether the tag is available.

404

Organizations.1701

Not found for tag resource.

Resource with the tag not found.

Check whether the resource which the tag is attached is available.

409

Organizations.1702

Conflict for tag.

Tag already exists.

Check whether the resource already has the tag.

400

Organizations.1703

Quota exceeded for tag.

Tag quota exceeded.

Check whether the number of tags exceeds the maximum allowed on the resource.

400

Organizations.1800

Invalid quota value.

Invalid quota value.

Check whether the input quota value is correct.

404

Organizations.1900

Not found for trusted service.

Trusted service not found.

Check whether the input parameter is correct.

409

Organizations.1901

Conflict for trusted service.

Conflict for trusted service.

Check whether the trusted service already exists.

400

Organizations.1902

Delegated administrator is not empty for this service.

The delegated administrator is not specified.

Specify a delegated administrator for the current service.

400

Organizations.2000

Bad request for create service linked agency.

Failed to create the service-linked agency.

Check whether the input parameter is correct.

400

Organizations.2001

Bad request for missing app_name.

App name missing.

Check whether the app name is missing.

409

Organizations.2002

Conflict for service linked agency, already created.

Conflict for the service-linked agency.

Check whether the service-linked agency already exists.

400

Organizations.2003

Bad request for delete service linked agency.

Failed to delete the service-linked delegated administrator.

Check whether the input parameter is correct.

404

Organizations.2004

Not found for service linked agency.

Service-linked agency not found.

Check whether there is a service-linked agency.

404

Organizations.2005

Not found for service request for service_principal.

App name not found.

Check whether the app name is correct.

400

Organizations.2006

Bad request for authorization header, jwt token is malformed.

JWT token malformed.

Check whether the JSON Web Token (JWT) token is correct.

400

Organizations.2100

Exactly one of parent id and child id should be provided.

Either parent OU ID or child OU ID required.

Verify that either parent OU ID or child OU ID is provided.

409

Organizations.2101

Conflict for service, service_principal and app_name names must be unique.

Conflict for service_principal or app_name.

Check whether service_principal or app_name already exists.

404

Organizations.2102

Not found for service.

Service not found.

Check whether the input service_principal is correct.

400

Organizations.2103

Bad request for list service principal.

Failed to obtain the service_principal.

Check whether the input parameter is correct.

404

Organizations.2104

Not found for entity.

Entity not found.

Check whether the principal ID is correct. If the principal is newly created, try again later.

400

Organizations.2105

Policy type is invalid.

The policy type is invalid.

Check the policy type (tag_policy).

404

Organizations.2106

Not found for service principal from iam, must register at IAM.

service_principal not registered with IAM.

Check whether service_principal has been registered with IAM.

400

Organizations.2200

Time format or range error.

Incorrect time format or range.

Check whether the input parameter is correct.

400

Organizations.2201

Bad request for change customer relation.

Failed to change account association.

Contact the administrator.

400

Organizations.2202

The relation of domain ID has changed too many times.

Master-member account associations have been changed too many times.

Do not frequently change the master-member account associations. (A member account is allowed to change its association with the master account for ten times or less per month.)

403

Organizations.2007

Bad Request: {0}.

Failed to create the service-linked agency.

Check whether the required permission is granted based on the error cause.