Fix access and permission problems
Distinguish a missing subscription from a role, source or organization restriction.
- 1Confirm account and organization
- 2Read the exact message
- 3Check plan and role
- 4Check resource and source access
- 5Retry the original action
Identify the kind of restriction
| Symptom | Likely boundary | Who can resolve it? |
|---|---|---|
| Choose a plan / trial ended / payment required | Subscription or expired access | Workspace billing administrator |
| Not permitted to perform an action | Product permission or policy | Role or organization administrator |
| A file is missing but other files work | Workspace, connector or original source access | Workspace/source administrator |
| A model or plugin is unavailable | Organization release, role, provider or plan | Model/plugin administrator |
| Organization is suspended | Administrative restriction | Responsible administrator or support |
| Connection refused by a source provider | Source credentials or provider permissions | Source account/app administrator |
An administrator role does not replace a subscription or grant access to every private source. Do not solve a plan problem by giving everyone administrator rights.
Check role and resource access
- Confirm the organization currently selected in the sidebar.
- Ask an administrator to check your assigned roles and the specific action permission.
- For knowledge, also check access to the selected workspace or connector.
- Confirm that your original source identity can read the document.
- For AI access, check plugin/model availability and the relevant AI permission.
- Refresh the affected page after the settings are saved.
Multiple roles can contribute permissions, but source restrictions and sensitive-data rules still apply. The role preview in Discover is a useful check; it does not change another user's account.
“Role no longer exists” or role cannot be deleted
Reload the role list to avoid assigning a stale selection. A role in use must be reassigned before it can be deleted. Built-in roles and the last effective administrator have additional safeguards. If a current selectable role repeatedly fails, report it rather than creating duplicate roles to work around the error.
A paid account is still read-only
Confirm the selected organization and its plan status. A completed checkout and a usable subscription should agree. If a plan is shown as active but normal writes still produce a subscription warning, contact support with the organization, time and payment reference. Do not send card data or repeatedly purchase the same plan.
Details useful for support
Send the affected page, exact visible message, timestamp and diagnostic reference. Include the action you expected and the selected organization. Keep passwords, keys and confidential source content out of the report.