Yandex Cloud
Search
Contact UsTry it for free
  • Customer Stories
  • Documentation
  • Blog
  • All Services
  • System Status
    • Featured
    • Infrastructure & Network
    • Data Platform
    • AI for business
    • Security
    • DevOps tools
    • Serverless
    • Monitoring & Resources
  • All Solutions
    • By industry
    • By use case
    • Economics and Pricing
    • Security
    • Technical Support
    • Start testing with double trial credits
    • Cloud credits to scale your IT product
    • Gateway to Russia
    • Cloud for Startups
    • Center for Technologies and Society
    • Yandex Cloud Partner program
    • Price calculator
    • Pricing plans
  • Customer Stories
  • Documentation
  • Blog
© 2025 Direct Cursus Technology L.L.C.
All solutions
    • All solutions for IAM
    • Resolving errors when assigning the `resource-manager.clouds.owner` owner role to a cloud user
    • Resolving errors related to invitations to a cloud organization
    • Resolving the `The signature of response or assertion was invalid` error when signing in to a federated account
    • Resolving issues when creating OAuth tokens on behalf of Yandex ID accounts
    • Fixing the `publicAccessBindings` error when moving a cloud across organizations
    • Resolving the `OAuth token is invalid or expired` error
    • Fixing the `Contact your organization administrator for a new invitation` error
    • Resolving the `Service account is not available` error
    • Fixing the `PROHIBITED_BILLING_ACCOUNT_USAGE_STATUS` error
    • Resolving the `Validation failed - access_binding_deltas Number of elements must be in the range of 1 to 1000` error
    • Federated user is not displayed in the organization's user list
    • User does not see an invitation to an organization or `admin` role
    • Unknown user detected in an organization
    • Resolving the `Invalid login` error
    • Resolving the `Forbidden` error when operating under a service account
    • How to delete a cloud
    • How to cancel pending cloud deletion
    • How to change the cloud owner
    • How to change the organization owner
    • How to delete an organization
    • How long a session lasts when authenticating a federated user
    • What minimum role a user requires to access the YC management console

In this article:

  • Issue description
  • Solution
  1. Identity and Access Management
  2. Resolving the `Forbidden` error when operating under a service account

Resolving the Forbidden error as a service account

Written by
Yandex Cloud
Updated at December 17, 2025
  • Issue description
  • Solution

Issue descriptionIssue description

When running operations as a service account, you get the 403 Forbidden or Permission Denied errors.

SolutionSolution

Most likely, the selected role is assigned to the service account for itself as a resource. You need to assign the role to the service account for the folder following this guide.

Was the article helpful?

Previous
Resolving the `Invalid login` error
Next
How to delete a cloud
© 2025 Direct Cursus Technology L.L.C.