Help Center/ Cloud Container Engine/ FAQs/ Permissions/ Why Can't an IAM User Make API Calls?
Updated on 2025-04-25 GMT+08:00

Why Can't an IAM User Make API Calls?

Symptom

When an IAM user makes an API call, an error message similar to the following is displayed:

"code":403,"message":"This user only supports console access, not programmatic access."

This error message indicates that the IAM user does not have programmatic access permissions.

Solution

  1. Contact the account administrator and log in to the IAM console.
  2. Locate the IAM user to be modified and click the username.
  3. Change the access mode and select both Programmatic access and Management console access.

    Figure 1 Changing the access mode of an IAM user

  4. Click OK.