3413431 - Web IDE ABAP repository access fails: Timed out waiting for tunnel to open for tunnelId account:///<subaccount>

From Web IDE Full Stack the ABAP repository access fails with such message:

Timed out waiting for tunnel to open for tunnelId account:///<subaccount>

in Cloud Connector the Audit log shows such entry:

in ljs_trace.log file:

#DEBUG#com.sap.core.connectivity.tunnel.client.notification.application.ApplicationNotificationClientEventHandler#notification-client-16-1#          #Routing info from open tunnel packet property: {"path":"/connectivity","tunnelId":"account:///hp7t*****","hostIdentifier":"680676452","upgradeProtocol":"connectivity","secWebsocketAcceptHeaderSupported":true,"headers":{"cookie":"cookie_v=680676452","X-Connectivity-Pool":"services","X-Tunnel-Vm-Fingerprint":"76:a9:ba:47:95:de:cd:64:88:f8:84:4d:16:dd:05:12"},"queryParameters":{}}
#INFO#com.sap.core.connectivity.tunnel.client.notification.application.ApplicationNotificationClientEventHandler#notification-client-16-1#          #Received message of type: 1 (open tunnel) for tunnelId account:///hp7t**** and hostId: 680676452
#DEBUG#com.sap.scc.rt#Thread-12#          #Application tunnel to hp7****@eu2.hana.ondemand.com:services:dispatcher is not allowed(after 0ms)
...
#ERROR#com.sap.core.connectivity.tunnel.client.application.ApplicationClientConnectTask#Thread-12#          #Unexpected exception while establishing application tunnel connection for tunnelId: account:///hp7t*******
com.sap.core.connectivity.tunnel.client.TunnelNotAllowedException: Denied access for tunnel with id 'account:///hp7t*****' and attributes: 'applicationType:JAVA, applicationAccount:services, applicationName:dispatcher'
    at com.sap.core.connectivity.tunnel.client.application.ApplicationTunnelClient.doConnect(ApplicationTunnelClient.java:92)
    at com.sap.core.connectivity.tunnel.client.application.ApplicationTunnelClient.doConnect(ApplicationTunnelClient.java:85)
    at com.sap.core.connectivity.tunnel.client.application.ApplicationTunnelClient.doConnect(ApplicationTunnelClient.java:36)
    at com.sap.core.connectivity.tunnel.client.AbstractClient.connect(AbstractClient.java:238)
    at com.sap.core.connectivity.tunnel.client.application.ApplicationTunnelClient.connect(ApplicationTunnelClient.java:70)
    at com.sap.core.connectivity.tunnel.client.application.ApplicationClientConnectTask.run(ApplicationClientConnectTask.java:25)
    at java.base/java.lang.Thread.run(Thread.java:833)

SAP Web IDE Full-Stack

SAP Cloud Connector

SAPUI5 ABAP repository

KBA , CA-WDE-DPL-ABP , SAP Web IDE SAPUI5 ABAP Repository Deployment , BC-MID-SCC , SAP Cloud Connector On-Demand/On-Premise Connectivity , How To