Why Am I Getting a Permission Error Message?

Perform the following steps:

If you are using CDN as an IAM user with insufficient permissions, view each permission on Permissions Management and ask the account administrator to assign the required permissions to you by referring to Creating a User and Granting CDN Permissions.

The following table lists the common CDN permissions.

Policy	Description	Type
CDN Administrator	All operations on CDN. Scope: Global-level service	System role
CDN DomainReadOnlyAccess	Read-only permissions on CDN acceleration domain names. Scope: Global-level service	System-defined policy
CDN StatisticsReadOnlyAccess	Read-only permissions on CDN statistics. Scope: Global-level service NOTE: This policy does not include the permissions for querying operations reports.	System-defined policy
CDN LogsReadOnlyAccess	Read-only permissions on CDN logs. Scope: Global-level service	System-defined policy
CDN DomainConfiguration	Permissions for configuring CDN acceleration domain names. Scope: Global-level service	System-defined policy
CDN RefreshAndPreheatAccess	Permissions for configuring CDN cache refreshing and preheating. Scope: Global-level service	System-defined policy
CDN FullAccess	All operations on CDN. Scope: Global-level service	System-defined policy
CDN ReadOnlyAccess	All read-only operations on CDN. Scope: Global-level service	System-defined policy

When you want to acquire the CDN DomainConfiguration or CDN RefreshAndPreheatAccess permission, ensure that you also acquire the CDN DomainReadOnlyAccess permission. Otherwise, you cannot view the domain names, and thus cannot configure, or purge or prefetch cache for domain names.

Check whether your account has outstanding payments.
- If your account has outstanding payments and is in the retention period, the system will disable CDN for your domain names and stop the acceleration service.
- If your account has outstanding payments and the retention period expires, CDN will delete your domain names.