What it means
the acting account lacks an account-level permission; the one instance is Admin on PATCH /v1/agent-releases/{id}.
How to handle it
Grant the named account-level permission in meta.permission or use an account that already has it.
Wire contract
| Code | permission_required |
|---|---|
| Class | permission |
| HTTP status | 403 |
| Meta keys | permission |
| Raised | Yes |
The response uses the standard {"error": {…}} envelope. Branch on error.code, not the human-readable message. Preserve request_id when reporting a failure.