Tenant Policy Subset Violation

URI: https://docs.ankatech.co/errors/tenant-policy-subset-violation
HTTP Status: 422 Unprocessable Entity

When you see this

The policy you tried to set is not a subset of the parent (platform or tenant-type) policy. A tenant policy may only narrow — never widen — the policy it inherits from.

Common Causes

• Adding an algorithm or capability to a tenant policy that the parent policy does not allow.
• Loosening a restriction beyond what the inherited policy permits.
• Defining a policy value outside the bounds of the parent policy.

Response Example

{
  "type": "https://docs.ankatech.co/errors/tenant-policy-subset-violation",
  "title": "Tenant Policy Subset Violation",
  "status": 422,
  "detail": "The submitted tenant policy is not a subset of the platform policy. It allows values the parent policy forbids.",
  "instance": "/api/v3/admin/tenants/00000000-0000-0000-0000-000000000001/policies",
  "correlationId": "550e8400-e29b-41d4-a716-446655440000",
  "timestamp": 1730000000
}

Content-Type: application/problem+json — the response follows RFC 7807 Problem Details.

How to Resolve

1. Review the parent (platform/tenant-type) policy to see the allowed bounds.
2. Adjust the tenant policy so it only narrows the inherited policy.
3. Remove any value the parent policy forbids and re-submit.

For full schema definitions, examples, and interactive testing, see the Developer Hub Reference.