Specified service account action is not allowed #19950

pcace · 2024-06-19T08:37:10Z

pcace
Jun 19, 2024

Hi there,

i am trying to replicate a minio instance to another instance.
i have two minio docker container (minio/minio:RELEASE.2024-06-13T22-53-53Z) running on one machine, both using different data locations.

now i want to replicate from one to the other. therefore i have added a replication job on number 1 and added the second one.
as secret and key i have used root + pasword for both instances. (Originally posted by @jaredmcqueen in #16980 (comment))

now the replication job is running, but i get this error over and over again:

2024-06-19T08:31:41.417607408Z Error: Unable to heal service account cwNttdRzrtOt5v4ZAPYF from peer site backup -> local : Site replication error(s):
2024-06-19T08:31:41.417610493Z 'SRPeerReplicateIAMItem' on site backup (49bd99d3-8ae9-492f-8403-35da083dc0ab): succeeded
2024-06-19T08:31:41.417613199Z 'SRPeerReplicateIAMItem' on site local (81433c51-8ec6-4d0c-868b-d2ec48ab01d0): failed(backup->local: SRPeerReplicateIAMItem: We encountered an internal error, please try again. (Specified service account action is not allowed: the service account access key already taken)) (*fmt.wrapError)
2024-06-19T08:31:41.417617136Z 5: internal/logger/logger.go:268:logger.LogIf()
2024-06-19T08:31:41.417619560Z 4: cmd/logging.go:16:cmd.replLogIf()
2024-06-19T08:31:41.417622045Z 3: cmd/site-replication.go:5543:cmd.(*SiteReplicationSys).healUsers()
2024-06-19T08:31:41.417624570Z 2: cmd/site-replication.go:5257:cmd.(*SiteReplicationSys).healIAMSystem()
2024-06-19T08:31:41.417627736Z 1: cmd/site-replication.go:4280:cmd.(*SiteReplicationSys).startHealRoutine()
2024-06-19T08:32:05.526195158Z
2024-06-19T08:32:05.526226577Z API: SRPeerReplicateIAMItem
2024-06-19T08:32:05.526229712Z Time: 08:32:05 UTC 06/19/2024
2024-06-19T08:32:05.526231876Z DeploymentID: 49bd99d3-8ae9-492f-8403-35da083dc0ab
2024-06-19T08:32:05.526233870Z RequestID: 17DA5AB157E74EC5
2024-06-19T08:32:05.526235874Z RemoteHost: 10.0.1.5
2024-06-19T08:32:05.526237748Z Host: srv-captain--s3-storage-backup:9000
2024-06-19T08:32:05.526239731Z UserAgent: MinIO (linux; amd64) madmin-go/2.0.0
2024-06-19T08:32:05.526241735Z Error: Specified service account action is not allowed: the service account access key already taken (cmd.SRError)
2024-06-19T08:32:05.526243869Z 4: internal/logger/logger.go:268:logger.LogIf()
2024-06-19T08:32:05.526245773Z 3: cmd/logging.go:46:cmd.adminLogIf()
2024-06-19T08:32:05.526247746Z 2: cmd/admin-handlers-site-replication.go:194:cmd.adminAPIHandlers.SRPeerReplicateIAMItem()
2024-06-19T08:32:05.526249690Z 1: net/http/server.go:2166:http.HandlerFunc.ServeHTTP()
2024-06-19T08:33:36.940204703Z
2024-06-19T08:33:36.940236202Z API: SRPeerReplicateIAMItem
2024-06-19T08:33:36.940240389Z Time: 08:33:36 UTC 06/19/2024
2024-06-19T08:33:36.940243135Z DeploymentID: 49bd99d3-8ae9-492f-8403-35da083dc0ab
2024-06-19T08:33:36.940245709Z RequestID: 17DA5AC6A098887E
2024-06-19T08:33:36.940248053Z RemoteHost: 10.0.1.5
2024-06-19T08:33:36.940250398Z Host: srv-captain--s3-storage-backup:9000
2024-06-19T08:33:36.940252862Z UserAgent: MinIO (linux; amd64) madmin-go/2.0.0
2024-06-19T08:33:36.940255307Z Error: Specified service account action is not allowed: the service account access key already taken (cmd.SRError)
2024-06-19T08:33:36.940257812Z 4: internal/logger/logger.go:268:logger.LogIf()
2024-06-19T08:33:36.940260236Z 3: cmd/logging.go:46:cmd.adminLogIf()
2024-06-19T08:33:36.940262661Z 2: cmd/admin-handlers-site-replication.go:194:cmd.adminAPIHandlers.SRPeerReplicateIAMItem()
2024-06-19T08:33:36.940265186Z 1: net/http/server.go:2166:http.HandlerFunc.ServeHTTP()
2024-06-19T08:34:12.179903874Z
2024-06-19T08:34:12.179935764Z API: SYSTEM.replication
2024-06-19T08:34:12.179939041Z Time: 08:34:12 UTC 06/19/2024
2024-06-19T08:34:12.179941195Z DeploymentID: 49bd99d3-8ae9-492f-8403-35da083dc0ab

since i am quite new to minio i have no clue what this line acutally means:

2024-06-19T08:33:36.940255307Z Error: Specified service account action is not allowed: the service account access key already taken (cmd.SRError)

Any help would be very nice! Thanks a lot!!

mpinter · 2025-12-17T14:38:36Z

mpinter
Dec 17, 2025

@pcace did you ever resolve this ? We are in similar situation, and I can't find any information on this error.

0 replies

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Specified service account action is not allowed #19950

Uh oh!

{{title}}

Uh oh!

Replies: 1 comment

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

Specified service account action is not allowed #19950

Uh oh!

pcace Jun 19, 2024

Replies: 1 comment

Uh oh!

mpinter Dec 17, 2025

pcace
Jun 19, 2024

mpinter
Dec 17, 2025