Troubleshooting Tip: Unable to save configuration: error code: '-37 (Permission is denied)'

[contreraspa]

Description	This article describes that when an admin user creates/modify another admin user, the message 'Failed: Unable to save configuration: error code: -37 (Permission is denied)' is displayed
Scope	FortiMail.
Solution	Sometimes, when an admin user tries to create a new admin account or modify an existing one, could receive the following error:   This is because the current administrator is trying to assign to the new admin, some access modes that it has not been assigned itself. For example, in the following image, it is possible to see that the user 'adminuser' is creating the new user 'newadmin' and is assigning it the CLI, GUI, and REST API access modes: However, the current admin user 'adminuser' only has the CLI and GUI access modes assigned (does not have REST API access mode): When trying to create the new user, the error message 'Failed: Unable to save configuration: error code: -37 (Permission is denied)' will be displayed, because it is trying to assign to the new user an access mode that the account itself does not have. In this case, it is only possible to create the new user 'newadmin' and give it the same access modes that it has been assigned: CLI, GUI. To assign other access modes (in this case REST API), it is necessary to do so with an administrative account that has these accesses.