BerriAI/litellm · error · HTTPException

Access denied: You do not have permission to access this vec

Error message

Access denied: You do not have permission to access this vector store

What it means

Sentinel 403 from assert_user_can_access_vector_store: the resolved vector store's team/user restrictions do not include the caller. Access to multi-tenant managed stores is keyed to the caller's team_id/user_id; an admin must add them to the store's allowed list.

Source

Thrown at litellm/proxy/vector_store_endpoints/utils.py:258

        verbose_proxy_logger.warning(
            "Failed to resolve vector store id=%s from shared cache: %s",
            vector_store_id,
            e,
        )
        raise HTTPException(
            status_code=500,
            detail="Unable to validate vector store access",
        ) from e


async def assert_user_can_access_vector_store(
    vector_store: LiteLLM_ManagedVectorStore,
    user_api_key_dict: UserAPIKeyAuth,
    detail: str = "Access denied: You do not have permission to access this vector store",
) -> None:
    """Raise 403 unless the caller can access the resolved vector store."""
    if not await can_user_access_vector_store(vector_store, user_api_key_dict):
        raise HTTPException(status_code=403, detail=detail)


async def assert_user_can_access_vector_store_id(
    vector_store_id: str,
    user_api_key_dict: UserAPIKeyAuth,
    detail: str = "Access denied: You do not have permission to access this vector store",
) -> LiteLLM_ManagedVectorStore | None:
    """
    Resolve a managed vector store id and enforce ownership if it exists.

    Unknown ids are treated as provider-native ids and are not rejected here.
    """
    vector_store: Final = await get_litellm_managed_vector_store(vector_store_id=vector_store_id)
    if vector_store is not None:
        await assert_user_can_access_vector_store(
            vector_store=vector_store,
            user_api_key_dict=user_api_key_dict,
            detail=detail,

View on GitHub (pinned to 77b7c6c40c)

Solutions

Use a key/team granted access to this vector store, or ask an admin to grant permission.

Defensive patterns

Strategy: validation

When it happens

Trigger: Thrown at litellm/proxy/vector_store_endpoints/utils.py:258 when the library encounters an invalid state.

Common situations: See trigger scenarios.

Understand the failure class

Authentication and authorization failures — expired tokens, bad credentials, and missing scopes.

AI-assisted analysis of BerriAI/litellm@77b7c6c40c (2026-08-18). Data as JSON: /api/errors/739db83a5a01499c. Report an issue: GitHub.