Bring your towel and join one of the fastest growing data communities. Welcome to our second-generation open source orchestration platform, a completely rethought approach to dataflow automation.

Prefect Community

Hi there, After the Prefect UI Upgrade this Friday. I got `State message: Submission failed. PrefectHTTPStatusError: Client error '403 Forbidden' for url '<https://api.prefect.cloud/api/accounts/acc_id/workspaces/workspace_id/block_documents/block_id?include_secrets=true>'`  when I  trigger a deployment. I am the owner of the workspace and everything worked fine before.  Does anyone have the same issue? thanks

I fixed the issue by changing the service account's role from "runner" to "developer." It seems that the problem occurred because runners lack access to secrets, as mentioned in the documentation. However, I'm curious why this wasn't a problem before.
I'm also confused about why runners can't access secrets, even though they're required for running flows. can you explain it pls? thanks

Hi Iryna. Glad you hear you got that figured out. I don’t think anything changed with role permissions so I’m afraid I’m not sure why it wasn’t a problem before. 

Thanks for the feedback on the runner role. My understanding is that the runner is meant more for stakeholders to run flows from the ui rather than for service accounts. We can’t change the name but we can probably make that more clear in the docs. 