Permission errors
Disabled buttons, "not allowed" messages and 401 or 403 responses, and which role can do what.
What you will achieve
You will know whether a refusal comes from your role, your plan, or a sign-in problem.
Common cases
| What you see | Cause | Fix |
|---|---|---|
| A button is greyed out; hovering explains why | Your role is Member, who can test and use but not change things | Ask an owner or admin, or have your role changed |
| Buy is disabled | You are a member, or payments are not set up | Ask an owner or admin |
| "Only the workspace owner can delete it." | Account deletion is owner-only | Ask the owner |
| 403 from the API or dashboard | Your role may not do that | See Team and roles |
| 401 "Sign in to continue." in the dashboard | Your session ended | Sign in again |
| 401 using an API key | The key is wrong, revoked, or the path is not one keys can use | See API keys |
| Redirected to the sign-in page | Not signed in | Sign in |
| Cannot see an agent a colleague made | You are in a different workspace | Switch workspace from the Workspace card at the top of the sidebar |
| "The Free plan allows 1 agent" | A plan limit, not a role limit | See Plans and billing |
| Cannot remove or demote someone | You cannot remove yourself; there must be one owner; only owners change owners | Promote another owner first |
What each role can do
See the table in Team and roles.
Testing
Sign in as the affected person and try the action. A disabled control explains itself on hover.
Expected result
An owner or admin can perform the action; a member sees it disabled.
Related guides
Something here does not match what you see in the dashboard? Let us know.