[not_found] membership not found (AUTHZ-cdgFk)
Reproduce:
- User registers with email (without organization), e.g., example@gmail.com - User does not receive verification email (should receive one) - User goes to ui/console and clicks “Resend code” beside the email field - Error “[not_found] membership not found (AUTHZ-cdgFk)” (Screenshot1) - LLMs say the user must be a member (apparently, you only become a member if you are registered as a manager of the organization, which in my opinion a normal user should not be). - So the user is registered but cannot verify their email (at least not this way!). Attempt 1: After adding the user to the default organization as a manager with “Org User Self Manager,” the following message appears: => [permission_denied] No matching permissions found (AUTH-5mWD2) => Screenshot 3 Attempt 2: Only when I enter the user as manager “Org User Manager” (Screenshot 4) does the button work: => Confirmation code sent by email. => Screenshot5 Attempt 3: If the user doesn't have any roles as manager and you CHANGE the email instead of clicking on “Resend code,” the user receives an email and can verify themselves => So this must be a bug with the “Resend code” button. -- Sidenote: As I understand it, a user should be able to use the “Resend code” button at the latest when they are entered as the “Org User Self Manager” manager, or am I misunderstanding something?
- User registers with email (without organization), e.g., example@gmail.com - User does not receive verification email (should receive one) - User goes to ui/console and clicks “Resend code” beside the email field - Error “[not_found] membership not found (AUTHZ-cdgFk)” (Screenshot1) - LLMs say the user must be a member (apparently, you only become a member if you are registered as a manager of the organization, which in my opinion a normal user should not be). - So the user is registered but cannot verify their email (at least not this way!). Attempt 1: After adding the user to the default organization as a manager with “Org User Self Manager,” the following message appears: => [permission_denied] No matching permissions found (AUTH-5mWD2) => Screenshot 3 Attempt 2: Only when I enter the user as manager “Org User Manager” (Screenshot 4) does the button work: => Confirmation code sent by email. => Screenshot5 Attempt 3: If the user doesn't have any roles as manager and you CHANGE the email instead of clicking on “Resend code,” the user receives an email and can verify themselves => So this must be a bug with the “Resend code” button. -- Sidenote: As I understand it, a user should be able to use the “Resend code” button at the latest when they are entered as the “Org User Self Manager” manager, or am I misunderstanding something?
1 Reply
Hi @VantomLP, I'm an AI assistant for ZITADEL. While a team member reviews this question, I'll see if I can find relevant sources for your question.
Answer
I wasn't able to find a direct answer, here are some relevant sources:
1. V2 session returning "membership not found" : This GitHub discussion shows similar membership errors and indicates that IAM_OWNER role may be required for certain operations.
2. [permission_denied] No matching permissions found (AUTH-5mWD2) : This Discord post describes the same AUTH-5mWD2 error and mentions finding IAM roles in the default admin account's membership section.
Feel free to tag @Ask Inkeep with additional questions.
Got it. Tagging @Rajat for additional help.