2660650 - HTTP 403 Forbidden error occurs while accessing "Configure Process Integration" in SAP BTP Cockpit

Note:

"Configure Process Integration" is only used in the following cases:
  - for Subscription and CPEA accounts - to enable Enterprise Messaging and/or Integration Advisor.
  - for CPEA accounts - to provision SAP Cloud Integration (former CPI) service/tenant, or to change tenant environment (Prod / Non-Prod).
See this blog.

So far in many cases, you don't have to access "Configure Process Integration" to design iFlows, run messages and monitor SAP Cloud Integration tenant. 
If you encounter HTTP 403 Forbidden error while accessing your SAP Cloud Integration tenant (https://xxxxxx.hana.ondemand.com/itspaces), check SAP KBA 2543001 - How to grant access to SAP Cloud Integration tenant.

In SAP BTP Cockpit you have enabled "Service: Process Integration" under your Subaccount.
When you click on "Configure Process Integration", a new page (e.g. with URL https://provision<subaccount ID>-xxxxx.hana.ondemand.com/tenantadmin) pops up but your access fails with error HTTP Status 403 - Forbidden.

Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.

• SAP Integration Suite
• SAP Cloud Integration