3413431 - Web IDE ABAP repository access fails: Timed out waiting for tunnel to open for tunnelId account:///<subaccount>

"Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental."

From Web IDE Full Stack the ABAP repository access fails with such message:

Timed out waiting for tunnel to open for tunnelId account:///<subaccount>

in Cloud Connector the Audit log shows such entry:

in ljs_trace.log file:

#ERROR#com.sap.core.connectivity.tunnel.client.application.ApplicationClientConnectTask#Thread-12#          #Unexpected exception while establishing application tunnel connection for tunnelId: account:///https://*******
com.sap.core.connectivity.tunnel.client.TunnelNotAllowedException: Denied access for tunnel with id 'account:///https://*****' and attributes: 'applicationType:JAVA, applicationAccount:services, applicationName:dispatcher'
    at com.sap.core.connectivity.tunnel.client.application.ApplicationTunnelClient.doConnect(ApplicationTunnelClient.java:92)
    at com.sap.core.connectivity.tunnel.client.application.ApplicationTunnelClient.doConnect(ApplicationTunnelClient.java:85)
    at com.sap.core.connectivity.tunnel.client.application.ApplicationTunnelClient.doConnect(ApplicationTunnelClient.java:36)
    at com.sap.core.connectivity.tunnel.client.AbstractClient.connect(AbstractClient.java:238)
    at com.sap.core.connectivity.tunnel.client.application.ApplicationTunnelClient.connect(ApplicationTunnelClient.java:70)
    at com.sap.core.connectivity.tunnel.client.application.ApplicationClientConnectTask.run(ApplicationClientConnectTask.java:25)
    at java.base/java.lang.Thread.run(Thread.java:833)

• SAP Web IDE Full-Stack
• SAP Cloud Connector
• SAPUI5 ABAP repository

SAP Cloud Connector, SAP WEB IDE, SAP Gateway Server ABAP , KBA , CA-WDE-DPL-ABP , SAP Web IDE SAPUI5 ABAP Repository Deployment , BC-MID-SCC , SAP Cloud Connector On-Demand/On-Premise Connectivity , How To