SAP Knowledge Base Article - Preview

3481841 - Attempting to enable CF TCP Routing results in error 'provided scopes [xxx] do not include allowed scopes [network.adminnetwork.write]'


  • You are trying to enable the TCP Routing Cloud Foundry feature for BTP (Cloud Foundry TCP Routing)
  • You execute the CF CLI command to add a Network Policy e.g: cf add-network-policy <app_name> <destination_app_name> --port <port> --protocol tcp and the following error, or similar is returned:
    error message : Adding network policy from app <destination_app_name> in org <org> / space <space> as <user>
    provided scopes [ password.write cloud_controller.write openid uaa.user] do not include allowed scopes [network.adminnetwork.write]



  • SAP Business Technology Platform
  • Cloud Foundry environment


SAP Business Technology Platform all versions


tcp, ip, routing, btp, cli, console, error, permissions, roles, scopes, admin, administrator, global, subaccount, account, network.admin, network.write , KBA , BC-CP-CF-CRTM , Cloud Foundry Container Runtime , BC-CP-CF , Cloud Foundry , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.