错误消息

当对 Google Cloud 资源的请求违反访问权限限制或包含无效标头时，组织权限限制会返回特定的 HTTP 错误和状态消息。您可以使用以下错误响应来排查请求失败问题。

“权限遭拒”出错提示示例

如果请求因违反组织权限限制标头而被拒绝，系统会返回 403 HTTP 响应，并提供以下详细信息：

{
  "error": {
    "code": 403,
    "message": "Access denied by organization restriction. Please contact your administrator for additional information.",
    "status": "PERMISSION_DENIED",
    "details": [
      {
        "@type": "type.googleapis.com/google.rpc.ErrorInfo",
        "reason": "ORG_RESTRICTION_VIOLATION",
        "domain": "googleapis.com",
        "metadata": {
          "service": "abc.googleapis.com"
        }
      }
    ]
  }
}

格式错误的标头出错提示示例

如果请求包含格式错误的 X-Goog-Allowed-Resources 标头，系统会返回 400 HTTP 响应，其中包含以下详细信息：

{
  "error": {
    "code": 400,
    "message": "Org Restriction Header is not valid. Please pass a valid Org Restriction Header.",
    "status": "INVALID_ARGUMENT",
    "details": [
      {
        "@type": "type.googleapis.com/google.rpc.ErrorInfo",
        "reason": "ORG_RESTRICTION_HEADER_INVALID",
        "domain": "googleapis.com",
        "metadata": {
          "service": "abc.googleapis.com"
        }
      }
    ]
  }
}