---
title: Runbook — AUTHZ_INSUFFICIENT_PERMISSION (권한 부족)
category: AUTHZ
error_codes: [AUTHZ_INSUFFICIENT_PERMISSION, STUDIO_ACCESS_DENIED]
severity: P3
owner: oncall
last_updated: 2026-08-18
status: stub
---

# Runbook: AUTHZ_INSUFFICIENT_PERMISSION (`runbook://authz/insufficient-permission`)

## Symptoms

- HTTP 403 with `error.code=AUTHZ_INSUFFICIENT_PERMISSION`
- Valid token but missing required role or permission
- Tech Log Studio (`studio-v1.yaml`) surfaces the same resource-authorization scenario as
  `error.code=STUDIO_ACCESS_DENIED` — same root cause, Studio-scoped code
  (feature-techlog-studio-backend, `StudioError.STUDIO_ACCESS_DENIED`)

## Diagnosis

- Check user's assigned roles in IdP
- Review endpoint's required permission annotation

## Action

- Grant correct role/permission to user
- Verify endpoint permission requirement is correct

## Escalation

- Escalate to access-management team if bulk users affected

---

> **Stub**: Phase D2 — author body after domain adoption. (feature-operational-runbook-contract D9)