---
name: Registry-ts_access_denied
title: Why am I getting `Access denied` errors in Container Registry?
description: You have a valid IAM API key or OAuth token, but you still get `Access denied` errors in IBM Cloud® Container Registry.
last-updated: 2025-10-14
---

> ## Documentation Index
> The table of contents for this documentation set is at https://cloud.ibm.com/docs/Registry?format=markdown
> The index for all IBM Cloud docs is at: https://cloud.ibm.com/docs/llms.txt
> Use these files to discover more information as needed.

# Why am I getting `Access denied` errors in Container Registry?
{: #troubleshoot-access-denied}
{: troubleshoot}
{: support}

You have a valid IAM API key or OAuth token, but you still get `Access denied` errors in IBM Cloud® Container Registry.
{: shortdesc}

When you try to access Container Registry, you get one of the following messages.

- `You are not authorized to access the specified resource`, see [Why am I getting errors for a resource?](https://cloud.ibm.com/docs/Registry?topic=Registry-troubleshoot-resource&format=markdown) for assistance.

- `Insufficient scope`, you might see this message if you're trying to access Container Registry by using a client such as Docker, see [Why am I getting errors about insufficient scope?](https://cloud.ibm.com/docs/Registry?topic=Registry-troubleshoot-scope&format=markdown) for assistance.

- `Your account has exceeded its pull traffic quota for the current month.`, see [Why am I getting errors about my quota?](https://cloud.ibm.com/docs/Registry?topic=Registry-troubleshoot-quota&format=markdown) for assistance.

- `Your account has exceeded its image storage quota for the current month.`, see [Why am I getting errors about my quota?](https://cloud.ibm.com/docs/Registry?topic=Registry-troubleshoot-quota&format=markdown) for assistance.

- `You must access this account over the private network`, see [Why am I getting errors about using a private network?](https://cloud.ibm.com/docs/Registry?topic=Registry-troubleshoot-private&format=markdown) for assistance.

- `Status code 403 Forbidden`, you might see this message if you're using IBM Cloud Code Engine, see [Why am I getting a `Forbidden` error when I'm using Code Engine?](https://cloud.ibm.com/docs/Registry?topic=Registry-troubleshoot-forbidden-ce&format=markdown) for assistance.

- `ImagePullBackoff`, you might see this status when you start containers in Kubernetes, see [Why do images fail to pull from registry with `ImagePullBackOff` or authorization errors?](https://cloud.ibm.com/docs/Registry?topic=Registry-ts-app-image-pull&format=markdown) for assistance.