> For the complete documentation index, see [llms.txt](https://docs.devolutions.net/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.devolutions.net/cloud/knowledge-base/troubleshooting-articles/errors-list.md).

# Errors list

Here are all the possible errors in Devolutions Cloud with the corresponding number.

{% hint style="info" %}
Access-denied-errors in Devolutions Cloud are listed [here](https://docs.devolutions.net/cloud/kb/troubleshooting-articles/access-denied-errors/).
{% endhint %}

### Forbidden - 403

<table><thead><tr><th width="85" align="center">Code</th><th width="262.19989013671875">Error</th><th>Description</th></tr></thead><tbody><tr><td align="center"><strong>0</strong></td><td>UserNotFound</td><td>User not found in Devolutions Cloud. If the user is not found or has been deleted, go to <em><strong>Administration</strong></em> – <em><strong>Users</strong></em> and <a href="https://docs.devolutions.net/cloud/web-interface/administration/management/users/create-invite-users/">create the user</a>.</td></tr><tr><td align="center"><strong>1</strong></td><td>UserDisabled</td><td>User is disabled. Go to <em><strong>Administration</strong></em> – <em><strong>Users</strong></em> and select the user. Click <em><strong>Edit</strong></em> and click <em><strong>Is enabled</strong></em> to enable the user.</td></tr><tr><td align="center"><strong>2</strong></td><td>TwoFactorRequired</td><td>Connection attempt to Devolutions Cloud without 2FA.</td></tr><tr><td align="center"><strong>3</strong></td><td>SetupRequired</td><td>A new Devolutions Cloud must be <a href="https://docs.devolutions.net/cloud/getting-started/create-your-devolutions-cloud-workspace/">set up</a>. This can only be done by the owner. A normal user will be blocked.</td></tr><tr><td align="center"><strong>4</strong></td><td>SetupNotRequired</td><td>Trying to set up a Devolutions Cloud when it is already set up.</td></tr><tr><td align="center"><strong>5</strong></td><td>EmergencyResetDenied</td><td>Normal user is denied for <a href="https://docs.devolutions.net/cloud/kb/how-to-articles/use-the-recovery-kit-with-devolutions-cloud">emergency reset</a>. The emergency reset of the Devolutions Cloud can only be performed by its owner.</td></tr><tr><td align="center"><strong>6</strong></td><td>HubDisabled</td><td>Devolutions Cloud is disabled.</td></tr><tr><td align="center"><strong>7</strong></td><td>IPForbidden</td><td>The host IP is forbidden/blocked by IP filtering, Tor traffic blocking, or application user restricted IP. <em><strong>IP allowlist</strong></em> is managed under <em><strong>Administration</strong></em> – <em><strong>IP allowlist</strong></em>. Administrators can enable or disable <em><strong>Tor traffic</strong></em> by clicking on <em><strong>Administration</strong></em> – <em><strong>System settings</strong></em> – <em><strong>Block Tor traffic</strong></em>. Management of the <em><strong>IP allowlist and application user IP restriction</strong></em> is available under <em><strong>Administration</strong></em> – <em><strong>Application identities</strong></em>.</td></tr><tr><td align="center"><strong>8</strong></td><td>AccessDenied</td><td>Access denied. This is the most commonly used default reason for blocking or denying an action when no specific reason is given/requested.</td></tr><tr><td align="center"><strong>10</strong></td><td>OfflineAccessDisallowed</td><td>Request only to Devolutions Cloud with offline setting enabled when requesting shared vault.</td></tr><tr><td align="center"><strong>11</strong></td><td>UserApprovalRequired</td><td>Happen when a <a href="https://docs.devolutions.net/cloud/web-interface/administration/management/users/create-invite-users/">user is not found in Devolutions Cloud</a> and <a href="https://docs.devolutions.net/cloud/getting-started/get-started-with-sso-in-devolutions-cloud/invite-users-to-devolutions-cloud-with-sso/">SSO</a> is enabled.</td></tr><tr><td align="center"><strong>13</strong></td><td>OrganizationSynchronizedMember</td><td>The synchronized group cannot be edited or deleted using SSO.</td></tr><tr><td align="center"><strong>15</strong></td><td>CompanionToolDisabled</td><td><a href="https://docs.devolutions.net/cloud/web-interface/administration/management/users/companion-tools-access/">Companion tools are blocked</a> by Devolutions Cloud. The setting is separate for <a href="https://docs.devolutions.net/password-manager/kb/">Devolutions Password Manager browser extension</a> and Devolutions Password Manager mobile app. Administrators can enable these settings by editing the user in <em><strong>Administration</strong></em> – <em><strong>Users</strong></em>.</td></tr><tr><td align="center"><strong>16</strong></td><td>OfflineAccessDisallowedForPamVault</td><td>Request only allowed to Devolutions Cloud with offline setting enabled when requesting a PAM vault.</td></tr><tr><td align="center"><strong>17</strong></td><td>PamEntryNotCheckedOut</td><td>The PAM entry is not <a href="https://docs.devolutions.net/cloud/web-interface/entries/checkout-system/#check-out-an-entry">checked out</a>.</td></tr><tr><td align="center"><strong>21</strong></td><td>UserVaultDisabled</td><td>A user is trying to edit their user vault, but Devolutions Cloud has disabled user vault.</td></tr><tr><td align="center"><strong>22</strong></td><td>MaximumBlobSizeExceeded</td><td>The blob/attachment/file is too large for the Devolutions Cloud.</td></tr><tr><td align="center"><strong>23</strong></td><td>MaximumBlobContainerTotalSizeExceeded</td><td>Blob storage has reached the limit of the blob container.</td></tr><tr><td align="center"><strong>24</strong></td><td>CannotCreateTemporaryAccessOnRoot</td><td><a href="https://docs.devolutions.net/cloud/web-interface/temporary-access/request-temporary-access/">Temporary access</a> to a root entry cannot be <em><strong>requested</strong></em>.</td></tr><tr><td align="center"><strong>25</strong></td><td>UserExpired</td><td>User has <a href="https://docs.devolutions.net/cloud/web-interface/administration/management/users/#re-invite-a-user">expired</a>.</td></tr><tr><td align="center"><strong>26</strong></td><td>SupportTicketsOnlyAllowedForAdministrators</td><td>This feature is blocked for regular users if the Devolutions Cloud has restricted the ability to submit <a href="https://docs.devolutions.net/cloud/web-interface/administration/configuration-security/system-settings/">support tickets</a> to administrators only.</td></tr><tr><td align="center"><strong>27</strong></td><td>InvalidPAMCheckoutApprover</td><td>Current user is not allowed to <a href="https://docs.devolutions.net/pam/pam-with-devolutions-cloud/privileged-accounts/approve-access-privileged-account/">approve/reject PAM check out requests</a>.</td></tr><tr><td align="center"><strong>28</strong></td><td>PromptLoginRequired</td><td>The administrator activated <a href="https://docs.devolutions.net/cloud/web-interface/administration/configuration-security/authentication">Force prompt login</a>. Users who are already authenticated must log out and log in again using their Devolutions Account.</td></tr><tr><td align="center"><strong>29</strong></td><td>LimitReached</td><td>The limit has been reached.</td></tr><tr><td align="center"><strong>30</strong></td><td>InvalidPAMLicense</td><td>The PAM license is invalid.</td></tr><tr><td align="center"><strong>31</strong></td><td>CannotModifyEntryPermissions</td><td>Cannot modify entry permissions.</td></tr><tr><td align="center"><strong>32</strong></td><td>ApplicationIdentityNotRegisteredToApplicationService</td><td>The Reporting service needs to be assigned to an Application identity.</td></tr></tbody></table>

### Unauthorized - 401

<table><thead><tr><th width="83.4000244140625">Code</th><th width="156">Error</th><th>Description</th></tr></thead><tbody><tr><td><strong>0</strong></td><td>Other</td><td>The default is when no specific reason is given in the context of SSO.</td></tr><tr><td><strong>1</strong></td><td>OrgIdMismatch</td><td>In SSO context, if the organization ID from the user login request does not match the organization ID from the Devolutions Cloud.</td></tr><tr><td><strong>2</strong></td><td>InvalidProviderId</td><td>In SSO context, when the provider ID from user login request is empty or null.</td></tr><tr><td><strong>3</strong></td><td>InvalidScopes</td><td>A request to Devolutions Cloud is made without specifying any scopes.</td></tr></tbody></table>

### Locked - 423

<table><thead><tr><th width="84.20001220703125">Code</th><th width="134.20001220703125">Error</th><th>Description</th></tr></thead><tbody><tr><td><strong>0</strong></td><td>Opened</td><td>A user attempts to open an entry that is currently being opened by another user.</td></tr><tr><td><strong>1</strong></td><td>LockedForEdit</td><td>A user attemps to edit an entry that is being edited by another user.</td></tr><tr><td><strong>2</strong></td><td>Checkout</td><td>A user tries to open, edit, and even checkout an item that is currently being checked out by another user.</td></tr><tr><td><strong>3</strong></td><td>Forbidden</td><td>A user tries to check out an item or change the status of the item.</td></tr></tbody></table>

### Custom Error 5XY | User Invitation - 544

<table><thead><tr><th width="82.60003662109375">Code</th><th width="182.4000244140625">Error</th><th>Description</th></tr></thead><tbody><tr><td><strong>2</strong></td><td>AlreadyExist</td><td>The user to invite already exists.</td></tr><tr><td><strong>3</strong></td><td>UserNotProvisioning</td><td>The user invitation process failed.</td></tr><tr><td><strong>4</strong></td><td>EmailNotSend</td><td>Email failed to be sent after user was invited.</td></tr><tr><td><strong>6</strong></td><td>Forbidden</td><td>Attempting to invite a user without having the proper permissions.</td></tr></tbody></table>

### Secret ID expiration error | Status 401

<table><thead><tr><th width="94.5999755859375">Status</th><th width="244.39996337890625" valign="middle">Error</th><th valign="middle">Description</th></tr></thead><tbody><tr><td>401</td><td valign="middle">Response: Stack: Devolutions.Hub.Clients.HubClient.d__31.MoveNext()</td><td valign="middle">The Client ID or secret supplied by your organization is invalid, please contact an admin of your organization.</td></tr></tbody></table>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.devolutions.net/cloud/knowledge-base/troubleshooting-articles/errors-list.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.