listing users shows an HTTP 403 error

[ktdreyer]

I am an org admin, and I can list the users in my account in the web UI (with console.redhat.com).

I cannot list the users in my account with the CLI:

~/bin/ocm account users
USER                                     USER ID                                  ROLES
Error: Can't retrieve accounts: status is 403, identifier is '11', code is 'ACCT-MGMT-11' and operation identifier is 'xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx': Account with ID XXXXXXXXXXXXXXXXXXXXXXXXXXX denied access to perform list on Account with HTTP call GET /api/accounts_mgmt/v1/accounts

Version:

~/bin/ocm  version
1.0.8

[ktdreyer]

I'm managing an org for users that create ROSA clusters with console.redhat.com.

I think I need it to hit this URL, instead of /api/accounts_mgmt/v1/accounts:

https://api.access.redhat.com/account/v1/accounts/$ACCOUNT_ID/users

Using an RHSM API key from https://access.redhat.com/management/api

[ktdreyer]

Turns out I'm looking for something more like https://github.com/redhat-community-ai-tools/rhsm-mcp for my particular use-case of managing users in my OCM org.

But I still don't understand why the ocm CLI does not function for me.