AZ705: Not allowed

The signed-in person asked an authz.* function for something the policy doesn't let them do: share or unshare this object, give a role, manage roles or keys, see who has access or the shares, decide a request or a review, break the glass. The message says what; authz.explain(type, id, perm) says why. Answer 403.

Reported to the app, by the authz.* functions and the policy's rules: the code is in the error's HINT (rowfence help AZ709), and the SDKs' errors carry it as code.