Upon investigation, it was discovered that the hosted user was created with user rights which only allow the account owner to forward web traffic to TMWS.
To resolve this issue, it is important to understand the difference between a hosted user as a user and a hosted user as an operator:
- User: Allows the account owner to forward web traffic to TMWS.
- Operator: Grants the account owner access to the management console with the following permissions:
- View, customize, and manage the Dashboard.
- View, query, and manage logs and reports except Cloud Syslog Forwarding and Log Consolidation.
- View all configurations and data under Gateways, Policies, and Administration, but cannot perform operations on them.
- Export configurations and data that provide an export operation, for example, raw logs, audit logs, approved and blocked URLs, and so on.
Therefore, it is recommended to create a new hosted user with operator rights to allow the user to access the TMWS portal in read-only mode.