# Certficate Upload Acces Denied **URL:** \ **Category:** Forum\ **Tags:** cumulocity-edge, thin-edge-io, cumulocity, device-connectivity\ **Created:** [August 8, 2023, 11:09am UTC](https://community.cumulocity.com/t/certficate-upload-acces-denied/2983 "2023-08-08T11:09:01Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![Bayrem\_Trabelsi](https://dub1.discourse-cdn.com/flex005/user_avatar/community.cumulocity.com/bayrem_trabelsi/32/14349_2.png) [@Bayrem\_Trabelsi](https://community.cumulocity.com/u/Bayrem_Trabelsi)\ **Post date:** [August 8, 2023, 11:09am UTC](https://community.cumulocity.com/t/certficate-upload-acces-denied/2983/1 "2023-08-08T11:09:02Z")
I want to Upload A Certificate but it always says Access denied!! I tried the same thing with an Admin Account and it is the same Problem **Acces Denied**!! ![image](https://europe1.discourse-cdn.com/flex005/uploads/cumulocity/original/3X/2/a/2af2f2010d18dff9321dbf4028ad4de02d88486e.png) I need your Support on this one Thank you ---
**Author:** ![Christoph\_Souris](https://dub1.discourse-cdn.com/flex005/user_avatar/community.cumulocity.com/christoph_souris/32/5464_2.png) [@Christoph\_Souris](https://community.cumulocity.com/u/Christoph_Souris)\ **Post date:** [August 8, 2023, 11:38am UTC](https://community.cumulocity.com/t/certficate-upload-acces-denied/2983/2 "2023-08-08T11:38:35Z")
You’d need `ROLE_TENANT_MANAGEMENT_ADMIN` or `ROLE_TENANT_ADMIN` for this. Can you verify that your user has these? See also: [Cumulocity IoT - OpenAPI Specification](https://cumulocity.com/api/10.15.0/#tag/Trusted-certificates) ---
**Author:** ![Robert\_Neale](https://dub1.discourse-cdn.com/flex005/user_avatar/community.cumulocity.com/robert_neale/32/31965_2.png) [@Robert\_Neale](https://community.cumulocity.com/u/Robert_Neale)\ **Post date:** [August 8, 2023, 12:15pm UTC](https://community.cumulocity.com/t/certficate-upload-acces-denied/2983/3 "2023-08-08T12:15:21Z")
Use Dev tools to see what call is getting the error. It’s likely you haven’t got the correct permissions as Christoph suggests. ---
**Author:** ![Nadia\_Rusenova](https://dub1.discourse-cdn.com/flex005/user_avatar/community.cumulocity.com/nadia_rusenova/32/31959_2.png) [@Nadia\_Rusenova](https://community.cumulocity.com/u/Nadia_Rusenova)\ **Post date:** [August 8, 2023, 1:25pm UTC](https://community.cumulocity.com/t/certficate-upload-acces-denied/2983/4 "2023-08-08T13:25:40Z")
Hi Christoph, We have another user that is having the same problem when adding a certificate. The user tried with an admin account and still gets “Access Denied” messages. Can you please advise on a possible solution? Thanks, Nadia ---
**Author:** ![Robert\_Neale](https://dub1.discourse-cdn.com/flex005/user_avatar/community.cumulocity.com/robert_neale/32/31965_2.png) [@Robert\_Neale](https://community.cumulocity.com/u/Robert_Neale)\ **Post date:** [August 8, 2023, 1:37pm UTC](https://community.cumulocity.com/t/certficate-upload-acces-denied/2983/5 "2023-08-08T13:37:41Z")
What does Dev tools show ‘Access is denied’ to? I can add a cert to this tenant using ‘UniversityRelations’ user. It’s got TENANT\_ADMIN permission. ![image](https://europe1.discourse-cdn.com/flex005/uploads/cumulocity/original/3X/5/e/5e5ffb321b75c5d285c2c48f435adaeed6f6ccca.png) ‘Faculty1’ certainly does NOT have the correct permissions. ---
**Author:** ![Reuben\_Miller2](https://dub1.discourse-cdn.com/flex005/user_avatar/community.cumulocity.com/reuben_miller2/32/317_2.png) [@Reuben\_Miller2](https://community.cumulocity.com/u/Reuben_Miller2)\ **Post date:** [August 8, 2023, 1:51pm UTC](https://community.cumulocity.com/t/certficate-upload-acces-denied/2983/6 "2023-08-08T13:51:28Z")
Note, the admins group does NOT have the required permissions. At least on my test tenant, the only out-of-the-box group which includes the `ROLE_TENANT_MANAGEMENT_ADMIN` role is “Tenant Manager”. ---
**Author:** ![Christoph\_Souris](https://dub1.discourse-cdn.com/flex005/user_avatar/community.cumulocity.com/christoph_souris/32/5464_2.png) [@Christoph\_Souris](https://community.cumulocity.com/u/Christoph_Souris)\ **Post date:** [August 8, 2023, 2:52pm UTC](https://community.cumulocity.com/t/certficate-upload-acces-denied/2983/7 "2023-08-08T14:52:01Z")
As Reuben pointed out, the default `admins` group does not have the required permissions. You can check what you have in the UI: ![image](https://europe1.discourse-cdn.com/flex005/uploads/cumulocity/original/3X/a/a/aa04ef3bec2ac13fcaf629969ffa868612802378.png) What you are looking for is “Tenant management”. ---
**Author:** ![system](https://dub1.discourse-cdn.com/flex005/user_avatar/community.cumulocity.com/system/32/31990_2.png) [@system](https://community.cumulocity.com/u/system)\ **Post date:** [February 4, 2024, 2:52pm UTC](https://community.cumulocity.com/t/certficate-upload-acces-denied/2983/8 "2024-02-04T14:52:19Z")
This topic was automatically closed 180 days after the last reply. New replies are no longer allowed.