# Why does a tool report permission denied for a file I can open?

Canonical URL: https://help.iagenify.com/faqs/tools/why-does-a-tool-report-permission-denied-for-a-file-i-can-open

[← Back to Tools FAQs](https://help.iagenify.com/faqs/tools)

HELP CENTER · FAQ Tools 1 min read
# Why does a tool report permission denied for a file I can open?
A file browser and a command-line or integration tool may run under different identities or scopes. Opening a file in one interface does not prove another process can read or modify it from its own context.
IaGenify
Tools

## Compare identity and access scope
Check which account, service identity, workspace, and operating-system permissions the failing tool uses. Also confirm the file is not locked, read-only, policy-protected, or on a mount the tool cannot reach.
A path may be visible through a linked workspace while the tool operates in a separate container or restricted root. Verify the resolved absolute path and parent-directory access instead of assuming the displayed path grants access.
## Grant only the needed permission
Configure the narrowest access required, such as read permission for one file or write permission for a project folder. Avoid elevating every operation when a scoped grant will solve the issue.
Retry after confirming effective access and inspect the result. If access is intentionally denied, use an approved export or handoff process rather than bypassing the boundary or copying unrelated files. [← Back to Tools FAQs](https://help.iagenify.com/faqs/tools)