support_access.action_not_allowed

A break-glass support session called an endpoint that would show a credential or a raw subscription key once, or change partner roles other than restoring a PartnerAdmin.

Code	`support_access.action_not_allowed`
HTTP status	403
Category	`Forbidden`
Arguments	`reason` (`RevealsCredential`, `RoleAssignment`)

Example response

application/problem+json

{
  "type": "https://docs.test.konsolutelab.uk/errors/support_access.action_not_allowed",
  "title": "…",
  "status": 403,
  "code": "support_access.action_not_allowed",
  "args": {},
  "traceId": "00-4bf92f3577b34da6a3ce929d0e0e4736-00f067aa0ba902b7-01",
  "instance": "/api/v1/…"
}

Handling it

Branch on code, not on title or the status alone, and log traceId. Codes are stable; new codes may appear, so fall back on the HTTP status for a code you do not know. See Handling errors and the list of codes.