1330242 - "Insufficient Scopes Error! " when requesting a one click loaner for job "test-android-4.3-arm7-api-15/debug-xpcshell-6"

Status: RESOLVED WORKSFORME

(Taskcluster :: UI, defect)

Description

[Alessio Placitelli [:Dexter]]

I was trying to request a one-click loaner to debug a weird failure in [1]. However, after going through the initial landing page and clicking "One-Click Loaner", I was presented with the error in the summary.

The extended error is:

> You do not have sufficient scopes. This request requires you to have one of the following sets of scopes:
> [ [ "queue:create-task:aws-provisioner-v1/gecko-t-linux-xlarge" ], [ "queue:define-task:aws-provisioner-v1/gecko-t-linux-xlarge", "queue:task-group-id:-/e3wqOhK4TTmgkBBR8D959Q", "queue:schedule-task:-/e3wqOhK4TTmgkBBR8D959Q/e3wqOhK4TTmgkBBR8D959Q" ] ]

And the additional details are attached in this bug.

[1] - https://treeherder.mozilla.org/#/jobs?repo=try&revision=ff75288eeb6e19dfc3d12a2a90e2c03b8e8fa4f2&selectedJob=67604608

Comment 1

[Dustin J. Mitchell [:dustin] (he/him)]

How were you logged into TaskCluster when you did this?

Comment 2

[Alessio Placitelli [:Dexter]]

(In reply to Dustin J. Mitchell [:dustin] from comment #1)
> How were you logged into TaskCluster when you did this?

Using Okta and my @mozilla.com account

Comment 3

[Dustin J. Mitchell [:dustin] (he/him)]

Ah, it looks like you don't have SCM level 1 set up for that account (https://www.mozilla.org/en-US/about/governance/policies/commit/access-policy/)

Maybe you do for another account?  At any rate, only those with scm level 1 or higher can use one-click loaners (it is the same permission required to push to try).

Comment 4

[Alessio Placitelli [:Dexter]]

(In reply to Dustin J. Mitchell [:dustin] from comment #3)
> Ah, it looks like you don't have SCM level 1 set up for that account
> (https://www.mozilla.org/en-US/about/governance/policies/commit/access-
> policy/)
> 
> Maybe you do for another account?  At any rate, only those with scm level 1
> or higher can use one-click loaners (it is the same permission required to
> push to try).

Ah, I see, thank you. I assumed a @mozilla.com account had enough privileges.

But that calls for another question: how can I log-in with my bugzilla/github/email that has enough privileges? I attempted to do the "log in by email", I succeed, but I still didn't have enough privileges, even though that's the email that I use for pushing to try and land stuff.

Comment 5

[Dustin J. Mitchell [:dustin] (he/him)]

If you have an account that does have scm_level_1 (I didn't see an account under your gmail when I checked, but perhaps I missed something), then you can login using Okta with that account.  Mozilla scm_level_1 access is associated with an LDAP account, and all LDAP accounts (not just those ending in @mozilla.com) can use Okta.