CHW-1203 RoleAssignmentExceedsPermissions
the requested role grants permissions beyond the caller's own; ask a broader-privileged admin to assign it
Copies the raw Markdown source of this guide, for pasting into an LLM or notes.
Default message: the requested role grants permissions beyond the caller’s own; ask a broader-privileged admin to assign it
HTTP status:403(client)
Problem. The requested role grants permissions the caller does not
hold. Cause. The permission-subset check (canAssignRole) failed —
callers may only assign roles whose permission set is a subset of their
own. Fix. Ask an admin with the needed permissions to assign the
role, or assign a less-privileged role. HTTP 403.