---
name: satellite-ts-location-missing-location
title: Why can't I see a location that another user gave me access to?
description: You are granted access to another user's Satellite location. However, when you list locations, you do not see the location.
last-updated: 2026-08-13
---

> ## Documentation Index
> The table of contents for this documentation set is at https://cloud.ibm.com/docs/satellite?format=markdown
> The index for all IBM Cloud docs is at: https://cloud.ibm.com/docs/llms.txt
> Use these files to discover more information as needed.

# Why can't I see a location that another user gave me access to?
{: #ts-location-missing-location}

You are granted access to another user's Satellite location. However, when you list locations, you do not see the location.
{: tsSymptoms}

The location owner might have scoped your Satellite access in IBM Cloud IAM to only the `location` resource type, which prevents the location from returning unless you target the regional endpoint that the location is managed from.
{: tsCauses}

Target the regional endpoint, or ask the location owner to update your permissions.
{: tsResolve}

## Target the regional endpoint
{: #ts-location-missing-location-target}

1. Ask the location owner which [IBM Cloud multizone region](https://cloud.ibm.com/docs/satellite?topic=satellite-sat-regions&format=markdown) the Satellite location is managed from. For example, the owner can run `ibmcloud sat location get --location <location_name_or_ID>` and review the **Managed from** field.
2. From the CLI, [target the regional endpoint](https://cloud.ibm.com/docs/openshift?topic=openshift-kubernetes-service-cli&format=markdown#cs_target), such as Washington, D.C. (`us-east`) in the following example.
    ```sh
    ibmcloud oc init --host https://us-east.containers.cloud.ibm.com
    ```
    {: pre}

3. Verify that you can view the Satellite location.
    ```sh
    ibmcloud sat location ls
    ```
    {: pre}

If you still cannot view the Satellite location, ask the location owner to check your access policy. If the access policy is scoped to a particular location, the policy must be scoped to the location ID, not to the location's name.

## Ask the location owner to update your permissions
{: #ts-location-missing-location-perms}

Ask the location owner to update your access policy in IBM Cloud IAM so that access to Satellite locations is no longer scoped to locations. The steps vary depending on how the location owner set up your access policy. The following commands provide examples for updating access group and individual policies from the CLI. For more information, see [Managing access for Satellite](https://cloud.ibm.com/docs/satellite?topic=satellite-iam&format=markdown).

1. Log in to IBM Cloud. If you have a federated account, include the `--sso` option.
    ```sh
    ibmcloud login [--sso]
    ```
    {: pre}

2. List the access policies for the user or access group, and note the **Policy ID** that grants access to the Satellite location.
    * For individual users
        ```sh
        ibmcloud iam user-policies <user@email.com>
        ```
        {: pre}

    * For access groups

        ```sh
        ibmcloud iam access-group-policies <access_group>
        ```
        {: pre}

        Example output
        ```sh
        Policy ID:   11a11111-bb2b-3c33-444d-ee5ee55ee55e
        Roles:       Viewer   
        Resources:                         
                Service Name    satellite      
                Resource Type   location   
        ```
        {: screen}

3. Update the access policy so that the policy is no longer scoped to locations. 
    - For individual users
        ```sh
        ibmcloud iam user-policy-update <user@email.com> <policy_ID> --roles Viewer --service-name satellite
        ```
        {: pre}

    - For access groups
        ```sh
        ibmcloud iam access-group-policy-update <group> <policy_ID> --roles Viewer --service-name satellite
        ```
        {: pre}

        Example output
        ```sh
        Policy ID:   11a11111-bb2b-3c33-444d-ee5ee55ee55e
        Version:     2-111aaa1111a1a1aa1a1a11aa11a1aa11
        Roles:       Viewer 
        Resources:                         
                    Service Name    satellite      
        ```
        {: screen}