- Product Introduction
- Purchase Guide
- Operation Guide
- Console Overview
- Organization Settings
- Department Management
- Member Account Management
- Viewing Member List and Basic Information
- Removing Organization Member
- Adding Organization Member
- Canceling Member Invitation
- Binding Tags to Members and Departments
- Creating Member Login Permission
- Configuring Member Login Permission
- Authorizing Sub-Users to Log in to Member Accounts
- Configuring Message Subscription for Created Member
- Member Finance Management
- Member Access Management
- Service Control Policy
- Overview
- Enabling Service Control Policy
- Creating Custom Service Control Policy
- Viewing Service Control Policy Details
- Modifying Custom Service Control Policy
- Deleting Custom Service Control Policy
- Binding Custom Service Control Policy
- Unbinding Custom Service Control Policy
- Disabling Service Control Policy
- Service Control Policy
- Resource Management
- Member Audit
- Identity Center Management
- API Documentation
- History
- Introduction
- API Category
- Making API Requests
- Organization Settings APIs
- Department and Member Management APIs
- ListOrganizationIdentity
- Organization Service Management APIs
- CAM Identity Center Service Management APIs
- CAM Identity Center User Management APIs
- CAM Identity Center User Group Management APIs
- CAM Identity Center Single Sign-On Management APIs
- CAM Identity Center Permission Configuration Management APIs
- CAM Identity Center Multi-Account Authorization Management APIs
- CAM Identity Center Sub-User Synchronization Management APIs
- Data Types
- Error Codes
- TCO API 2018-12-25
- History
- API Category
- Making API Requests
- Read APIs
- Write APIs
- UpdateOrganizationNode
- UpdateOrganizationMember
- SendOrganizationInvitation
- QuitOrganization
- MoveOrganizationMembersToNode
- DenyOrganizationInvitation
- DeleteOrganizationNodes
- DeleteOrganizationMembers
- DeleteOrganizationMemberFromNode
- DeleteOrganization
- CreateOrganization
- CancelOrganizationInvitation
- AddOrganizationNode
- AcceptOrganizationInvitation
- Data Types
- Error Codes
- FAQs
- Glossary
- Product Introduction
- Purchase Guide
- Operation Guide
- Console Overview
- Organization Settings
- Department Management
- Member Account Management
- Viewing Member List and Basic Information
- Removing Organization Member
- Adding Organization Member
- Canceling Member Invitation
- Binding Tags to Members and Departments
- Creating Member Login Permission
- Configuring Member Login Permission
- Authorizing Sub-Users to Log in to Member Accounts
- Configuring Message Subscription for Created Member
- Member Finance Management
- Member Access Management
- Service Control Policy
- Overview
- Enabling Service Control Policy
- Creating Custom Service Control Policy
- Viewing Service Control Policy Details
- Modifying Custom Service Control Policy
- Deleting Custom Service Control Policy
- Binding Custom Service Control Policy
- Unbinding Custom Service Control Policy
- Disabling Service Control Policy
- Service Control Policy
- Resource Management
- Member Audit
- Identity Center Management
- API Documentation
- History
- Introduction
- API Category
- Making API Requests
- Organization Settings APIs
- Department and Member Management APIs
- ListOrganizationIdentity
- Organization Service Management APIs
- CAM Identity Center Service Management APIs
- CAM Identity Center User Management APIs
- CAM Identity Center User Group Management APIs
- CAM Identity Center Single Sign-On Management APIs
- CAM Identity Center Permission Configuration Management APIs
- CAM Identity Center Multi-Account Authorization Management APIs
- CAM Identity Center Sub-User Synchronization Management APIs
- Data Types
- Error Codes
- TCO API 2018-12-25
- History
- API Category
- Making API Requests
- Read APIs
- Write APIs
- UpdateOrganizationNode
- UpdateOrganizationMember
- SendOrganizationInvitation
- QuitOrganization
- MoveOrganizationMembersToNode
- DenyOrganizationInvitation
- DeleteOrganizationNodes
- DeleteOrganizationMembers
- DeleteOrganizationMemberFromNode
- DeleteOrganization
- CreateOrganization
- CancelOrganizationInvitation
- AddOrganizationNode
- AcceptOrganizationInvitation
- Data Types
- Error Codes
- FAQs
- Glossary
Feature Description
If there is an Error field in the response, it means that the API call failed. For example:
{
"Response": {
"Error": {
"Code": "AuthFailure.SignatureFailure",
"Message": "The provided credentials could not be validated. Please check your signature is correct."
},
"RequestId": "ed93f3cb-f35e-473f-b9f3-0d451b8b79c6"
}
}
Code in Error indicates the error code, and Message indicates the specific information of the error.
Error Code List
Common Error Codes
| Error Code | Description |
|---|---|
| ActionOffline | This API has been deprecated. |
| AuthFailure.InvalidAuthorization | Authorization in the request header is invalid. |
| AuthFailure.InvalidSecretId | Invalid key (not a TencentCloud API key type). |
| AuthFailure.MFAFailure | MFA failed. |
| AuthFailure.SecretIdNotFound | Key does not exist. Check if the key has been deleted or disabled in the console, and if not, check if the key is correctly entered. Note that whitespaces should not exist before or after the key. |
| AuthFailure.SignatureExpire | Signature expired. Timestamp and server time cannot differ by more than five minutes. Please ensure your current local time matches the standard time. |
| AuthFailure.SignatureFailure | Invalid signature. Signature calculation error. Please ensure you’ve followed the signature calculation process described in the Signature API documentation. |
| AuthFailure.TokenFailure | Token error. |
| AuthFailure.UnauthorizedOperation | The request is not authorized. For more information, see the CAM documentation. |
| DryRunOperation | DryRun Operation. It means that the request would have succeeded, but the DryRun parameter was used. |
| FailedOperation | Operation failed. |
| InternalError | Internal error. |
| InvalidAction | The API does not exist. |
| InvalidParameter | Incorrect parameter. |
| InvalidParameterValue | Invalid parameter value. |
| InvalidRequest | The multipart format of the request body is incorrect. |
| IpInBlacklist | Your IP is in uin IP blacklist. |
| IpNotInWhitelist | Your IP is not in uin IP whitelist. |
| LimitExceeded | Quota limit exceeded. |
| MissingParameter | A parameter is missing. |
| NoSuchProduct | The product does not exist. |
| NoSuchVersion | The API version does not exist. |
| RequestLimitExceeded | The number of requests exceeds the frequency limit. |
| RequestLimitExceeded.GlobalRegionUinLimitExceeded | Uin exceeds the frequency limit. |
| RequestLimitExceeded.IPLimitExceeded | The number of ip requests exceeds the frequency limit. |
| RequestLimitExceeded.UinLimitExceeded | The number of uin requests exceeds the frequency limit. |
| RequestSizeLimitExceeded | The request size exceeds the upper limit. |
| ResourceInUse | Resource is in use. |
| ResourceInsufficient | Insufficient resource. |
| ResourceNotFound | The resource does not exist. |
| ResourceUnavailable | Resource is unavailable. |
| ResponseSizeLimitExceeded | The response size exceeds the upper limit. |
| ServiceUnavailable | Service is unavailable now. |
| UnauthorizedOperation | Unauthorized operation. |
| UnknownParameter | Unknown parameter. |
| UnsupportedOperation | Unsupported operation. |
| UnsupportedProtocol | HTTP(S) request protocol error; only GET and POST requests are supported. |
| UnsupportedRegion | API does not support the requested region. |
Service Error Codes
| Error Code | Description |
|---|---|
| FailedOperation.ApplyExist | The application already exists. |
| FailedOperation.AuthInfoEmpty | The user has not completed identity verification. |
| FailedOperation.AuthInfoNotSame | Enterprise real name mismatch. |
| FailedOperation.AuthNotEnterprise | The user has not completed enterprise identity verification. |
| FailedOperation.ConfigurationOverUpperLimit | Permission configurations created for a directory exceed the upper limit. |
| FailedOperation.CreateAccount | An exception occurred while creating the member. |
| FailedOperation.CreateBillingPermissionErr | Failed to create the billing permission |
| FailedOperation.CreateMemberAuthOverLimit | The number of times of account identity verification exceeds the upper limit. |
| FailedOperation.CreatePolicy | Failed to create the policy |
| FailedOperation.CreateRecordAlreadySuccess | Created successfully. |
| FailedOperation.CreateRecordNotExist | The creation record does not exist. |
| FailedOperation.CreateRole | An exception occurred while creating the role. |
| FailedOperation.CustomPolicyOverUpperLimit | Custom policies bound to the permission configuration exceed the upper limit. |
| FailedOperation.DBOperationError | SQL execution error. |
| FailedOperation.DecodeMetadataDocumentFailed | Metadata document decoding failed. |
| FailedOperation.DeleteGroupNotAllowExistUser | The user group still contains users and does not allow deleting users. |
| FailedOperation.DescribeOrgServiceUsageStatusErr | An error occurred in the query of the organization service usage status. |
| FailedOperation.DisableQuitSelfCreatedOrganization | You cannot quit an organization created by yourself. |
| FailedOperation.ExistOtherOrganizationMemberShared | There are shared resources with other organization members or from other organization members. |
| FailedOperation.GetAccountRegion | Errors occurred when account's regional attributes are obtained. |
| FailedOperation.GetAuthInfo | An error occurred while querying the identity information. |
| FailedOperation.GroupOverUpperLimit | User groups created exceed the upper limit. |
| FailedOperation.GroupUserCountOverUpperLimit | Members of the CIC user group exceed the limit. |
| FailedOperation.IdentityCenterAlreadyOpen | The CIC service has been activated. |
| FailedOperation.IdentityCenterNotAuth | The user has not performed identity verification and cannot activate the CIC service. |
| FailedOperation.IdentityCenterNotEnterpriseAuth | The user has not performed enterprise identity verification and cannot activate the CIC service. |
| FailedOperation.IdentityCenterNotOpen | The CIC service is not enabled. |
| FailedOperation.IdentityCenterNotOrganizationManager | The user is not an admin of the Tencent Cloud Organization and cannot activate the CIC service. |
| FailedOperation.IdentityCenterOrganizationNotOpen | The user has not activated Tencent Cloud Organization and cannot activate the CIC service. |
| FailedOperation.ImportFileIllegal | The uploaded file is invalid. |
| FailedOperation.InvitationExist | The invitation already exists. |
| FailedOperation.MemberExistDelegatePayerNotAllowDelete | The member has a payer and cannot be deleted. |
| FailedOperation.MemberExistInOtherOrganization | The member already belongs to another organization. |
| FailedOperation.MemberIsDelegatePayerNotAllowDelete | The member is a payer and cannot be deleted. |
| FailedOperation.MemberNameUsed | The name is already in use. |
| FailedOperation.MemberPolicyNameExist | The member authorization policy name is already in use. |
| FailedOperation.MemberShareResource | The member is sharing resources and cannot quit the organization. |
| FailedOperation.MetadataCosParsingFailed | IdP metadata parsing failed. |
| FailedOperation.NodeNotEmpty | There are members in this department |
| FailedOperation.NotSameRegion | You can only invite accounts within the same site. |
| FailedOperation.OperateBillingPermissionErr | An error occurred while manipulating the billing member permission. |
| FailedOperation.OperatePolicy | Failed to manipulate the policy. |
| FailedOperation.OrganizationAuthManageNotAllowDelete | The member is an entity admin account and cannot quit the organization. |
| FailedOperation.OrganizationAuthRelationExist | Real-name authentication relationship already exists. |
| FailedOperation.OrganizationMemberExist | Member already exists. |
| FailedOperation.OrganizationMemberNameUsed | The member name already exists. |
| FailedOperation.OrganizationMemberNotExist | The member account does not exist. |
| FailedOperation.OrganizationNodeDeleteOverLimit | The number of nodes to be deleted exceeds the upper limit. |
| FailedOperation.OrganizationNodeNameUsed | The node name is already in use. |
| FailedOperation.OrganizationNodeNotEmpty | There are nodes in the organization. |
| FailedOperation.OrganizationNodeNotExist | The organization node does not exist. |
| FailedOperation.OrganizationPermissionIllegal | The organization permission is invalid. |
| FailedOperation.OrganizationPolicyIllegal | The organization policy is invalid. |
| FailedOperation.OrganizationServiceAssignIsUse | Organization service delegation is in use. |
| FailedOperation.PartnerManagementErr | Distribution system calling error. |
| FailedOperation.PayUinIllegal | The payer is invalid. |
| FailedOperation.QuitShareUintError | Failed to leave the shared unit. |
| FailedOperation.ReSentInvitation | The invitation has already been sent before. |
| FailedOperation.RoleConfigurationAuthorizationAlreadyExist | The permission authorization already exists. |
| FailedOperation.RoleConfigurationAuthorizationExist | The permission configuration authorization exists. |
| FailedOperation.RoleConfigurationAuthorizationOverLimit | The number of permission configuration authorizations exceeds the limit. |
| FailedOperation.RoleConfigurationProvisioningAlreadyDeployed | The access configuration has been deployed to member accounts. |
| FailedOperation.RoleConfigurationProvisioningStatusError | The permission configuration synchronization has a status error. |
| FailedOperation.SAMLMetadataDocumentGetFailed | SAML metadata document acquisition failed. |
| FailedOperation.SAMLServiceProviderCreateFailed | SAML service provider creation failed. |
| FailedOperation.SSoStatusEnableNotClearIdentityProvider | The SAML identity provider information cannot be cleared when SSO is enabled. |
| FailedOperation.ShareResourceMemberInUse | The member is using a shared resource. |
| FailedOperation.SomeUinsNotInOrganization | The UIN does not belong to the organization. |
| FailedOperation.SubAccountIdentityExist | The sub-account has an identity. |
| FailedOperation.SubAccountNotExist | The sub-account does not exist. |
| FailedOperation.SynchronizedGroupNotAddUser | The synchronized user group does not allow adding users. |
| FailedOperation.SynchronizedGroupNotDelete | The synchronized user groups cannot be deleted. |
| FailedOperation.SynchronizedGroupNotRemoveUser | The synchronized user group does not allow deleting users. |
| FailedOperation.SynchronizedGroupNotUpdate | The synchronized user group cannot be updated. |
| FailedOperation.SynchronizedUserNotDelete | The synchronized user cannot be deleted. |
| FailedOperation.SynchronizedUserNotUpdate | The synchronized user cannot be modified. |
| FailedOperation.SystemPolicyOverUpperLimit | System policies bound to the permission configuration exceed the upper limit. |
| FailedOperation.TagResourcesError | Tagging error. |
| FailedOperation.UploadMetadataFailed | Data file uploading failed. |
| FailedOperation.UserAddGroupCountOverUpperLimit | Users joining the user group exceed the limit. |
| FailedOperation.UserOverUpperLimit | Users created exceed the upper limit. |
| FailedOperation.UserProvisioningAlreadyExists | The user synchronization already exists. |
| FailedOperation.UserProvisioningExists | The user synchronization exists. |
| FailedOperation.UserProvisioningFailed | The user synchronization failed. |
| FailedOperation.UserProvisioningOverLimit | The number of synchronized users exceeds the limit. |
| FailedOperation.X509CertificateAlreadyExist | The X509 certificate already exists. |
| FailedOperation.X509CertificateParsingFailed | X509 certificate parsing failed. |
| FailedOperation.XMLDataUnmarshalFailed | XML parsing for the metadata document failed. |
| FailedOperation.ZoneIdNotExist | The user zoneId of the CIC service does not exist. |
| InvalidParameter.BindPolicyNameNotAllowed | The permission configuration cannot be bound to this policy. |
| InvalidParameter.ConfigurationNameAlreadyExists | The permission configuration name already exists. |
| InvalidParameter.ConfigurationNameFormatError | The permission configuration name has a format error. |
| InvalidParameter.EmailAlreadyExists | The email address already exists. |
| InvalidParameter.GroupNameAlreadyExists | The user group name already exists. |
| InvalidParameter.GroupNameFormatError | The user group name has a format error. |
| InvalidParameter.GroupNotExist | The user group does not exist. |
| InvalidParameter.GroupUserAlreadyExists | The user already exists in the user group. |
| InvalidParameter.GroupUserNotExist | The user does not exist in the user group. |
| InvalidParameter.NextTokenInvalid | Invalid nextToken. |
| InvalidParameter.OrganizationMemberNotExist | The organization member does not exist. |
| InvalidParameter.OrganizationNodeNotExist | The organization node does not exist. |
| InvalidParameter.ParamError | Parameter error. |
| InvalidParameter.PolicyDocumentEmpty | The custom policy content cannot be empty. |
| InvalidParameter.PolicyNameAlreadyExists | The policy name already exists. |
| InvalidParameter.PolicyNameSizeOverUpperLimit | The policy name exceeds the length limit. |
| InvalidParameter.RoleConfigurationNotExist | The permission configuration does not exist. |
| InvalidParameter.RolePolicyAlreadyExist | The permission configuration still contains policies. |
| InvalidParameter.RolePolicyNotExist | The policy does not exist. |
| InvalidParameter.TagError | Tag value error. |
| InvalidParameter.UserAlreadyExistsGroup | The user still exists in the user group. |
| InvalidParameter.UsernameAlreadyExists | The username already exists. |
| InvalidParameter.UsernameFormatError | The username has a format error. |
| InvalidParameterValue.IdentityCenterZoneNameAlreadyExist | The CIC space name already exists. You should change the space name. |
| InvalidParameterValue.SSoStatusInvalid | The SSO enabling status is invalid. |
| InvalidParameterValue.X509CertificateFormatError | The X509 certificate has a format error. |
| InvalidParameterValue.ZoneNameFormatError | The space name does not meet specifications. |
| LimitExceeded.AddUserToGroupLimitExceeded | Requests for adding users to the user group exceed the limit. |
| LimitExceeded.CreateMemberOverLimit | The number of members to be created exceeds the upper limit. |
| LimitExceeded.CreateOrgServiceAssignOverLimit | The number of delegated admins for the service exceeds the limit. |
| LimitExceeded.CreateRoleAssignmentLimitExceeded | Requests for creating permission configurations exceed the limit. |
| LimitExceeded.CreateUserLimitExceeded | Requests for creating users exceed the limit. |
| LimitExceeded.CreateUserSyncProvisioningLimitExceeded | Requests for creating user synchronization tasks exceed the limit. |
| LimitExceeded.InvitationOverLimit | Invitation limit exceeded. |
| LimitExceeded.NodeDepthExceedLimit | The department has too many levels. |
| LimitExceeded.NodeExceedLimit | The number of departments exceeds the upper limit. |
| LimitExceeded.OrganizationMemberOverLimit | The number of members exceeds the upper limit. |
| LimitExceeded.RemoveUserFromGroupLimitExceeded | Requests for removing users from the user group exceed the limit. |
| ResourceNotFound.MemberIdentityNotExist | The authorizable member identity does not exist. |
| ResourceNotFound.MemberNotExist | The member does not exist. |
| ResourceNotFound.MemberPolicyNotExist | The organization member policy does not exist. |
| ResourceNotFound.OrganizationAuthRelationNotExist | The authentication subject does not exist. |
| ResourceNotFound.OrganizationMemberNotExist | The organization member does not exist. |
| ResourceNotFound.OrganizationNodeNotExist | The organization node does not exist. |
| ResourceNotFound.OrganizationNotExist | The organization does not exist. |
| ResourceNotFound.OrganizationServiceAssignNotExist | Organization service delegation does not exist. |
| ResourceNotFound.OrganizationServiceNotExist | The organization service does not exist. |
| ResourceNotFound.RoleConfigurationAuthorizationNotFound | The permission authorization record does not exist. |
| ResourceNotFound.RoleConfigurationProvisioningNotFound | The permission configuration synchronization does not exist. |
| ResourceNotFound.RoleConfigurationTaskNotFound | The permission configuration task does not exist. |
| ResourceNotFound.SAMLIdentityProviderNotFound | The SAML identity provider configuration does not exist. |
| ResourceNotFound.SAMLServiceProviderNotFound | The SAML service provider information does not exist. |
| ResourceNotFound.ServiceRoleNotExist | The organization service role does not exist. |
| ResourceNotFound.UserNotExist | The user does not exist. |
| ResourceNotFound.UserProvisioningNotFound | The user synchronization does not exist. |
| ResourceNotFound.UserProvisioningTaskNotFound | The user synchronization task does not exist. |
| ResourceNotFound.X509CertificateNotFound | The X509 certificate does not exist. |
| UnsupportedOperation.AbnormalFinancialStatusOfAdmin | The payer has a financial status exception and does not support pay-on-behalf. |
| UnsupportedOperation.AbnormalFinancialStatusOfMember | Member's financial status is abnormal. Pay-on-behalf mode is not supported. |
| UnsupportedOperation.AddDelegatePayerNotAllow | No paying relationships can be added. |
| UnsupportedOperation.AddDiscountInheritNotAllow | No offer inheritance relationships can be added. |
| UnsupportedOperation.AgentNotSame | The resellers of the administrator and the member do not match. |
| UnsupportedOperation.CreateMemberNotAllowDelete | The created member cannot be removed from the organization. |
| UnsupportedOperation.ExistedAgent | Payment-on-behalf is not supported for this member or payer as it is a reseller. |
| UnsupportedOperation.ExistedClient | Payment-on-behalf is not supported for this member or payer as it is a reseller’s account. |
| UnsupportedOperation.InconsistentUserTypes | The user type mismatches. |
| UnsupportedOperation.ManagementSystemError | An error occurred while calling the operations management system. |
| UnsupportedOperation.MemberAccountArrears | The member account has an overdue payment. |
| UnsupportedOperation.MemberDiscountInheritExisted | The member has an inherited offer. |
| UnsupportedOperation.MemberExistAccountLevelDiscountInherit | The member has an account-level offer. |
| UnsupportedOperation.MemberExistOperateProcessNotAllowDelete | The member is configured with operation audit and cannot be deleted. |
| UnsupportedOperation.MemberExistServiceNotAllowDelete | The member is a delegated admin of the organization service and cannot quit the organization. |
| UnsupportedOperation.MemberHasVoucher | The member has vouchers. Pay-on-behalf mode is not supported. |
| UnsupportedOperation.MemberIsAgent | The account is an agent or an agent customer. |
| UnsupportedOperation.MemberIsNotClient | The member is not a reseller customer. |
| UnsupportedOperation.MemberNoPayment | No credit card is bound to the member. |
| UnsupportedOperation.OrderInProgressExisted | There is an ongoing order. |
| UnsupportedOperation.OwnerDiscountInheritExisted | The admin has an inherited offer. |
| UnsupportedOperation.PayerArrearsAndNoCreditAccount | The payer has an overdue payment and has no credit account. |
| UnsupportedOperation.PayerExistAccountLevelDiscountInherit | The payer has an account-level offer. |
| UnsupportedOperation.SecondaryDistributorSubClientExisted | Pay-on-behalf is not supported for second-level reseller customers exist. |
Yes
No
Was this page helpful?