# Cumulocity IoT Device Management - Thin-Edge uploading device certificate: Access denied **URL:** \ **Category:** Forum\ **Tags:** thin-edge-io, cumulocity\ **Created:** [July 4, 2023, 8:19am UTC](https://community.cumulocity.com/t/cumulocity-iot-device-management-thin-edge-uploading-device-certificate-access-denied/7776 "2023-07-04T08:19:23Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![Markus\_Heider](https://dub1.discourse-cdn.com/flex005/user_avatar/community.cumulocity.com/markus_heider/32/12242_2.png) [@Markus\_Heider](https://community.cumulocity.com/u/Markus_Heider)\ **Post date:** [July 4, 2023, 8:19am UTC](https://community.cumulocity.com/t/cumulocity-iot-device-management-thin-edge-uploading-device-certificate-access-denied/7776/1 "2023-07-04T08:19:23Z")
#### _ **Product/components** used and **version/fix** level:_ Cumulocity IoT \> Device Management \> Management \> Trusted Certificates BACKEND: **1016.0.259** UI: **1016.0.259** #### _Detailed explanation of the problem:_ My user has global roles “admins” and “tenant manager”. When I upload a device certificate, created from a Thin-Edge client via Web GUI of Cumulocity IoT \> Device Management \> Management \> Trusted Certificates \> Add Trusted Certificate, the UI displays “Access denied”. #### _Error messages / **full error** message screenshot / **log** file:_ ![image](https://europe1.discourse-cdn.com/flex005/uploads/cumulocity/original/3X/f/3/f3022e0221b242cb083640325d54f8995c7ad180.png) #### _Question related to a **free trial** , or to a **production (customer)** instance?_ Instance = production ---
**Author:** ![Robert\_Neale](https://dub1.discourse-cdn.com/flex005/user_avatar/community.cumulocity.com/robert_neale/32/31965_2.png) [@Robert\_Neale](https://community.cumulocity.com/u/Robert_Neale)\ **Post date:** [July 4, 2023, 9:00am UTC](https://community.cumulocity.com/t/cumulocity-iot-device-management-thin-edge-uploading-device-certificate-access-denied/7776/2 "2023-07-04T09:00:41Z")
Can you open Dev Tools and look at the Network tab to see what you are denied access to? ---
**Author:** ![Markus\_Heider](https://dub1.discourse-cdn.com/flex005/user_avatar/community.cumulocity.com/markus_heider/32/12242_2.png) [@Markus\_Heider](https://community.cumulocity.com/u/Markus_Heider)\ **Post date:** [July 4, 2023, 9:27am UTC](https://community.cumulocity.com/t/cumulocity-iot-device-management-thin-edge-uploading-device-certificate-access-denied/7776/3 "2023-07-04T09:27:18Z")
Thank you. Please see screenshot. Maybe you need specific details? ![image](https://europe1.discourse-cdn.com/flex005/uploads/cumulocity/original/3X/6/3/636d48a2e01a4fd698769666ace96bb092c21a36.png) ---
**Author:** ![Reuben\_Miller2](https://dub1.discourse-cdn.com/flex005/user_avatar/community.cumulocity.com/reuben_miller2/32/317_2.png) [@Reuben\_Miller2](https://community.cumulocity.com/u/Reuben_Miller2)\ **Post date:** [July 4, 2023, 10:35am UTC](https://community.cumulocity.com/t/cumulocity-iot-device-management-thin-edge-uploading-device-certificate-access-denied/7776/4 "2023-07-04T10:35:51Z")
If the `Tenant Manager` role was only added to your user recently, then you will have to log out and log in again before it will work (this is mainly to do with the token that is cached in the browser). ---
**Author:** ![Robert\_Neale](https://dub1.discourse-cdn.com/flex005/user_avatar/community.cumulocity.com/robert_neale/32/31965_2.png) [@Robert\_Neale](https://community.cumulocity.com/u/Robert_Neale)\ **Post date:** [July 4, 2023, 11:10am UTC](https://community.cumulocity.com/t/cumulocity-iot-device-management-thin-edge-uploading-device-certificate-access-denied/7776/5 "2023-07-04T11:10:28Z")
OK, so it’s failing on adding a trusted cert.From Open API documentation… ![image](https://europe1.discourse-cdn.com/flex005/uploads/cumulocity/original/3X/8/b/8b090d6009d0e16fa5a641a82fcce508bb1c4d75.png) So whatever role you are using has to have tenant management admin permission. ---
**Author:** ![Markus\_Heider](https://dub1.discourse-cdn.com/flex005/user_avatar/community.cumulocity.com/markus_heider/32/12242_2.png) [@Markus\_Heider](https://community.cumulocity.com/u/Markus_Heider)\ **Post date:** [July 4, 2023, 11:36am UTC](https://community.cumulocity.com/t/cumulocity-iot-device-management-thin-edge-uploading-device-certificate-access-denied/7776/6 "2023-07-04T11:36:49Z")
Thank you. But I was already aware of this. I logged out and in. I also tried hard reload and deleting browser cache in debug mode. Didn´t help. I am using this user: ![image](https://europe1.discourse-cdn.com/flex005/uploads/cumulocity/original/3X/f/c/fc3c79196fdb75a2240a0b05dfadf0d270347dec.png) ---
**Author:** ![Markus\_Heider](https://dub1.discourse-cdn.com/flex005/user_avatar/community.cumulocity.com/markus_heider/32/12242_2.png) [@Markus\_Heider](https://community.cumulocity.com/u/Markus_Heider)\ **Post date:** [July 5, 2023, 12:47pm UTC](https://community.cumulocity.com/t/cumulocity-iot-device-management-thin-edge-uploading-device-certificate-access-denied/7776/7 "2023-07-05T12:47:08Z")
Hi Robert, as I already answered Reuben, I am using a user with tenant admin rights. I did logout/relogin, also deleting browser cache, did not help. ![image](https://europe1.discourse-cdn.com/flex005/uploads/cumulocity/original/3X/4/b/4b1f43a555f99d75354d157e485de53d1200a334.png) ---
**Author:** ![Robert\_Neale](https://dub1.discourse-cdn.com/flex005/user_avatar/community.cumulocity.com/robert_neale/32/31965_2.png) [@Robert\_Neale](https://community.cumulocity.com/u/Robert_Neale)\ **Post date:** [July 5, 2023, 2:39pm UTC](https://community.cumulocity.com/t/cumulocity-iot-device-management-thin-edge-uploading-device-certificate-access-denied/7776/8 "2023-07-05T14:39:09Z")
Neither your admins role or Tenant Manager have Tenant Management Admin permission. ![image](https://europe1.discourse-cdn.com/flex005/uploads/cumulocity/original/3X/5/6/56176580642d464ad31982d6e4b2c9e722bb8b8f.png) ---
**Author:** ![Markus\_Heider](https://dub1.discourse-cdn.com/flex005/user_avatar/community.cumulocity.com/markus_heider/32/12242_2.png) [@Markus\_Heider](https://community.cumulocity.com/u/Markus_Heider)\ **Post date:** [July 7, 2023, 1:16pm UTC](https://community.cumulocity.com/t/cumulocity-iot-device-management-thin-edge-uploading-device-certificate-access-denied/7776/9 "2023-07-07T13:16:37Z")
Oh! Thank you very much. I was too fast and I relied on the wording “Tenant manager” for this role. That this role has not activated tenant management rights… I will try and then I will be fine. Thank you again very much. ---
**Author:** ![system](https://dub1.discourse-cdn.com/flex005/user_avatar/community.cumulocity.com/system/32/31990_2.png) [@system](https://community.cumulocity.com/u/system)\ **Post date:** [January 3, 2024, 1:17pm UTC](https://community.cumulocity.com/t/cumulocity-iot-device-management-thin-edge-uploading-device-certificate-access-denied/7776/10 "2024-01-03T13:17:14Z")
This topic was automatically closed 180 days after the last reply. New replies are no longer allowed.