Why Am I Getting a Permission Error Message?

Perform the following steps:

1. If you are using CDN as an IAM user with insufficient permissions, check the permissions shown in Permissions Management and ask the account administrator to assign the required permissions to you by referring to Creating a User and Granting CDN Permissions.
   • Required permissions for role- or policy-based authorization

     Table 1 System-defined permissions for CDN

     Role/Policy Name	Description	Type	Dependencies
     CDN LogsReadOnlyAccess	Read-only permissions for the CDN log service	System-defined policy	None
     CDN RefreshAndPreheatAccess	Cache purge and prefetch permissions	System-defined policy	None
     CDN Administrator	Full permissions for CDN	System-defined role	None
     CDN ReadOnlyAccess	Read-only permissions for all CDN services	System-defined policy	None
     CDN FullAccess	Full permissions for CDN	System-defined policy	None
     CDN StatisticsReadOnlyAccess	Read-only permissions for the CDN statistics service	System-defined policy	None
     CDN DomainConfiguration	Permissions for configuring domain names	System-defined policy	None
     CDN DomainReadOnlyAccess	Read-only permissions on domain names	System-defined policy	None

     

     When you want to acquire the CDN DomainConfiguration or CDN RefreshAndPreheatAccess permission, ensure that you also acquire the CDN DomainReadOnlyAccess permission. Otherwise, you cannot view the domain names, and thus cannot configure, or purge or prefetch cache for domain names.

   • Required permissions for identity policy-based authorization

     Table 2 System-defined policies for CDN

     Policy Name	Description	Type
     CDNAdministratorPolicy	Full permissions for CDN	System-defined identity policy
     CDNReadOnlyPolicy	Read-only permissions for all CDN services	System-defined identity policy
     CDNStatisticsReadOnlyPolicy	Read-only permissions for the CDN statistics service	System-defined identity policy
     CDNLogsReadOnlyPolicy	Read-only permissions for the CDN log service	System-defined identity policy
     CDNDomainConfigurationPolicy	Permissions for configuring domain names	System-defined identity policy
     CDNRefreshAndPreheatPolicy	Cache purge and prefetch permissions	System-defined identity policy
     CDNFullPolicy	Full permissions for CDN	System-defined identity policy
     CDNDomainReadOnlyPolicy	Read-only permissions on domain names	System-defined identity policy
     CDNChargeConfigurationPolicy	Permission for enabling CDN billing and modifying and querying the billing option	System-defined identity policy

     

     When you want to acquire CDN DomainConfigurationPolicy or DomainConfigurationPolicy, ensure that you also acquire DomainConfigurationPolicy. Otherwise, you cannot view the domain names, and thus cannot configure, or purge or prefetch cache for domain names.

2. Check whether your account has outstanding payments.
   • If your account has outstanding payments and is in the retention period, the system will disable CDN for your domain names and stop the acceleration service.
   • If your account has outstanding payments and the retention period expires, CDN will delete your domain names.