{"record":{"id":"5083feb469959325","repo":"BerriAI/litellm","slug":"personal-key-creation-has-been-restricted-by-admin","errorCode":null,"errorMessage":"Personal key creation has been restricted by admin. Allowed roles={personal_key_generation['allowed_user_roles']}. Your role={user_api_key_dict.user_role}","messagePattern":"Personal key creation has been restricted by admin\\. Allowed roles=(.+?)\\. Your role=(.+?)","errorType":"http","errorClass":"HTTPException","httpStatus":400,"severity":"error","filePath":"litellm/proxy/management_endpoints/key_management_endpoints.py","lineNumber":444,"sourceCode":"    # the team has enabled KEY_ACCESS_GROUP_ASSIGNMENT.\n    TeamMemberPermissionChecks.enforce_member_can_assign_access_groups(\n        user_api_key_dict=user_api_key_dict,\n        team_table=team_table,\n        access_group_ids=data.access_group_ids,\n    )\n\n    return True\n\n\ndef _personal_key_membership_check(\n    user_api_key_dict: UserAPIKeyAuth,\n    personal_key_generation: PersonalUIKeyGenerationConfig | None,\n):\n    if personal_key_generation is None or \"allowed_user_roles\" not in personal_key_generation:\n        return True\n\n    if user_api_key_dict.user_role not in personal_key_generation[\"allowed_user_roles\"]:\n        raise HTTPException(\n            status_code=400,\n            detail=f\"Personal key creation has been restricted by admin. Allowed roles={personal_key_generation['allowed_user_roles']}. Your role={user_api_key_dict.user_role}\",\n        )\n\n    return True\n\n\ndef _object_permission_to_dict(\n    object_permission: LiteLLM_ObjectPermissionBase | None,\n) -> ObjectPermissionDict | None:\n    if object_permission is None:\n        return None\n    return cast(ObjectPermissionDict, object_permission.model_dump(exclude_unset=True))\n\n\ndef _personal_key_generation_check(user_api_key_dict: UserAPIKeyAuth, data: GenerateKeyRequest):\n    TeamMemberPermissionChecks.enforce_member_can_assign_access_groups(\n        user_api_key_dict=user_api_key_dict,","sourceCodeStart":426,"sourceCodeEnd":462,"githubUrl":"https://github.com/BerriAI/litellm/blob/77b7c6c40c0c5aa5fbcb1d6a1825ac39ca8829b8/litellm/proxy/management_endpoints/key_management_endpoints.py#L426-L462","documentation":"Error \"Personal key creation has been restricted by admin. Allowed roles={personal_key_generation['allowed_user_roles']}. Your role={user_api_key_dict.user_role}\" thrown in BerriAI/litellm.","triggerScenarios":"Thrown at litellm/proxy/management_endpoints/key_management_endpoints.py:444 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Ask the proxy admin to add your role to personal_key_generation.allowed_user_roles.","Have a user with an allowed role create the key for you."],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"77b7c6c40c0c5aa5fbcb1d6a1825ac39ca8829b8","analyzedAt":"2026-08-18T11:44:31.656Z","contentChangedAt":null,"schemaVersion":2},"datasetVersion":"2026-09-14T00:17:10.932Z"}