Add new domain

Environment: Self-hosted
Version: v4.5
What you expected to happen: Add new domain to the instance.
What went wrong: API return error.
Attachments
I'm using PAT token and the service user has Iam Owner permission.

POST {{base_url}}/system/v1/instances/327580204102858381/domains

POST {{base_url}}/system/v1/instances/327580204102858381/domains

POST {{base_url}}/system/v1/instances/327580204102858381/domains

POST {{base_url}}/system/v1/instances/327580204102858381/domains

{
  "code": 7,
  "message": "No matching permissions found (AUTH-5mWD2)",
  "details": [
    {
      "@type": "type.googleapis.com/zitadel.v1.ErrorDetail",
      "id": "AUTH-5mWD2",
      "message": "No matching permissions found"
    }
  ]
}

{
  "code": 7,
  "message": "No matching permissions found (AUTH-5mWD2)",
  "details": [
    {
      "@type": "type.googleapis.com/zitadel.v1.ErrorDetail",
      "id": "AUTH-5mWD2",
      "message": "No matching permissions found"
    }
  ]
}

{
  "code": 7,
  "message": "No matching permissions found (AUTH-5mWD2)",
  "details": [
    {
      "@type": "type.googleapis.com/zitadel.v1.ErrorDetail",
      "id": "AUTH-5mWD2",
      "message": "No matching permissions found"
    }
  ]
}

{
  "code": 7,
  "message": "No matching permissions found (AUTH-5mWD2)",
  "details": [
    {
      "@type": "type.googleapis.com/zitadel.v1.ErrorDetail",
      "id": "AUTH-5mWD2",
      "message": "No matching permissions found"
    }
  ]
}

Ask Inkeep•11/25/25, 7:47 PM

Hi @mfeitoza, I'm an AI assistant for ZITADEL. While a team member reviews this question, I'll see if I can find relevant sources for your question.

Ask Inkeep•11/25/25, 7:47 PM

Answer

I wasn't able to find a direct answer, here are some relevant sources:

Access ZITADEL APIs (1) : This explains that the System API requires special configuration and authentication that differs from service users with PAT tokens.
Zitadel Executing System API Call (2) : This discussion shows a user encountering the same "No matching permissions found (AUTH-5mWD2) " error when trying to use the System API, even with IAM_OWNER role assigned.

The System API cannot be accessed by service users using PAT tokens (1) . The System API requires a special configuration through the SystemAPIUsersSystemAPIUsers section in your ZITADEL configuration (2) .

**

Ask Inkeep•11/25/25, 7:47 PM

To learn more, see the sources I considered:

[1] Access ZITADEL APIs
[2] Zitadel Executing System API Call

Ask Inkeep•11/25/25, 7:47 PM

Feel free to tag @Ask Inkeep with additional questions.

AAsk Inkeep To learn more, see the sources I considered: [[1] Access ZITADEL APIs](https:...

Ask InkeepAPP•11/25/25, 8:00 PM

Glad I could be helpful. Feel free to create a new thread with any new questions you may have.