This knowledge article aims to clarify why users might receive the following error when attempting to self-service their user account. However, the System log does not show any errors regarding this issue.
You do not have permission to perform the requested action
- Self-Service
- Password Policy
The Password Policy for the user has the following configuration:
AND Additional verification is set to Any enrolled authenticator used for MFA/SSO.
When additional verification is set to Any enrolled authenticator used for MFA/SSO, the following message appears:
At least two non-email authenticators should set to Required in Enrollment Policy for groups assigned to this policy.
