<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
When Users Self-Serve, the error "You do not have permission to perform the requested action" is displayed
Okta Classic Engine
Okta Identity Engine
Administration
Overview

This knowledge article aims to clarify why users might receive the following error when attempting to self-service their user account. However, the System log does not show any errors regarding this issue.

You do not have permission to perform the requested action
 

Applies To
  • Self-Service
  • Password Policy
Cause

The Password Policy for the user has the following configuration:

AND Additional verification is set to Any enrolled authenticator used for MFA/SSO.

Image 3-8-24 at 2.43 PM.jpeg
When additional verification is set to Any enrolled authenticator used for MFA/SSO, the following message appears:

At least two non-email authenticators should set to Required in Enrollment Policy for groups assigned to this policy.

 
Solution
There are two ways to resolve this issue. 

Option 1

Modify the Additional verification setting to Not required or Only Security Question.

Option 2

Two non-email authenticators are required in the enrollment policy for the groups assigned to this policy.

Related References

Loading
When Users Self-Serve, the error "You do not have permission to perform the requested action" is displayed