Requested scope denied

The approval policy withheld some requested scopes. This is a warning, not a failed session start: the host created the session with its granted subset and returned both granted and denied.

#Common causes

• The requested capabilities exceed the policy for this caller; the default agent policy excludes generate:$, fs:outside-project and net.

#Fixes

• Use session.status or the session.begin result to check which operations the session can perform.

• If a denied capability is necessary, have the project operator adjust approval policy and begin a new session; otherwise continue within the granted scopes.

• Code: ARA1805

• Constant: SCOPE_DENIED

• Reported by: ara-host