Share A/S/F access errors - ULM / DIM — SaaS Knowledge Center

This topic covers some of the basic errors with the Share Access to an Account, Subscription, and Feature Process.

User does not have permission

If the inviting user does not have permissions to share any entities specified by theid, then the Process returns this error:

**RESPONSE - body**
{
   "processId": "fbd2ce42-2ce9-4116-b701-5af45b2aae79",
   "lastStep": false, 
   "processName": "entitlementManagement.ShareASF.v1.0",
   "fieldErrors": [
      {
         "field": "shareEntities[0].entityId",
         "code": "ValidShareEntity",
         "rejectedValue": 5021,
         "message": "Does not have admin permissions for Connect entity"
      }
   ],
   "stepName": "Prompt",
   "lastFailedStepAction": {
      "processId": "1eb6e48b-4501-4380-8f3a-ab142c9ceb59",
      "output": {
         "validPermissions": [
            "consumption",
            "admin",
            "admin+consumption"
         ],
         "validTypes": [
            "account",
            "subscription",
            "feature"
         ]
      },
      "parameters": {
         "authnIdentifier": "user@example.com",
         "shareEntities": [
            {
               "entityType": "account",
               "entityId": 12345,
               "permission": "consumption"
            }
         ]
      }
   }
}

The response also includes a lastStepFailedAction object that repeats the previous Process step’s response, so the user re-attempt their request.

`processId`	The unique identifier for this instance of the Process.
`stepName`	The internal name of the step that the Process is currently on / just executed.
`lastStep`	Boolean that indicates whether or not this was the last step in the Process.
`fieldError`	Array of possible error objects. Each object describes a separate error condition.
field	The name of the specific field where the error occurred.
`code`	An error object’s internal code name.
`rejectedValue`	The actual value that caused the error
`message`	Optional message that describes the error.
`lastFailedStepAction`	Object that repeats the previous Process step’s details and required input. This allows the client to retry the failed request.

Error Codes

Below is a list of potential error codes that may be returned during the execution of this Process. Note: See Common Process Error Codes.

HTTP Status	Digital Identity Management Business Error Code	Description
`400`	`ValidShareEntity`	Could not find a valid entity to share for one of the below reasons: - It does not exist - The type provided is not valid - Is not associated with the correct administration privileges to the current user, enabling the user’s ability to share them
`400`	`ValidEntityPermissionTemplate`	Failed to resolve permission template.
`400`	`ValidAuthenticationIdentifier`	The authentication identifier supplied as the recipient of sharing is not valid.
`400`	`NotEmpty`	Required values were not provided or were empty.
`400`	`exceed-max-user-count`	The entity has a specified limit on how many users it can be shared with which has been reached. The entity can no longer be shared unless another user is removed or decides to remove their own access to the entity.
`400`	`invalid-group-permission`	Specified User is not in the Group and current User does not have enough permission to add Users to the Group.
Parent topic:Share Access to an Account, Subscription, or Feature