In SAP Emarsys, the "Forbidden" error message when attempting to access the Security Settings page as an Account Owner indicates that a prerequisite step has not been completed. Specifically, Account Owners must verify their email address before they can access the Security Settings page under the Management menu. This requirement is explicitly outlined in Emarsys documentation to ensure account security and prevent unauthorized access.
The correct action to resolve this issue is to navigate toManagement > User Managementand verify your email address. According to the Emarsys Help documentation, "Please note that account owners must verify their email address (Management > User Management) before accessing this page. Trying to open Security Settings without a verified email address will result in an error message: 'Forbidden'" (reference: "Security settings:: Your account Security Settings," updated October 17, 2024). This step ensures that the Account Owner’s identity is confirmed, aligning with Emarsys’ security protocols.
Let’s examine why the other options are incorrect:
A. Create a new account owner role and email to access Security Settings: This is not a valid solution. Creating a new Account Owner role or email does not address the root cause of the "Forbidden" error, which is the lack of email verification for the existing Account Owner. Furthermore, only existing Account Owners or Emarsys Support can promote users to the Account Owner role, and the email address field for an Account Owner can only be changed byEmarsys Support, not by creating a new role (reference: "About Account Owners," updated September 25, 2024).
C. Check your email for a link to access the Account Security Settings: While an activation email is sent during the initial Account Owner setup, this option does not apply to fixing the "Forbidden" error after the account is created. The email verification process occurs within the platform under User Management, not via an external link specifically for accessing Security Settings (reference: "Activating your Account Owner role," updated October 29, 2024).
D. Clear your cookies and access Management > Security Settings: Clearing cookies might resolve some browser-related issues, but it has no bearing on the "Forbidden" error, which is tied to the email verification requirement enforced by the Emarsys platform, not a local browser issue.
Once the email address is verified inManagement > User Management, the Account Owner can access the Security Settings page without encountering the "Forbidden" error. This page allows configuration of security levels for account access and data management, such as setting permitted email domains, IP access controls, and API credentials (reference: "Security settings:: Your account Security Settings," updated November 11, 2024). This process underscores Emarsys’ emphasis on securing account administration tasks, ensuring only verified Account Owners can modify critical settings.
