Teleport Shows No Resources After Access Is Approved

Your access request was approved in SVIEW, but when you open Teleport the
resource list is empty. This article explains why and how to fix it.

Symptoms

Teleport shows the message: No Resources Found. Either there are no
resources in the "teleport.manage.cto2b.eu" cluster, or your roles do not
grant you access.
You can sign in to Teleport successfully, but no clusters, servers, or
applications are listed.
Your access request in SVIEW shows as approved.

Cause

Teleport issues your permissions as part of your login session. If you were
already signed in when the access request was approved, your current session
still carries the old, empty set of permissions. Signing out and back in
issues a new session that includes the newly granted access.

Less often, the approved request did not cover the resource you are looking
for, so the new session is correct but still does not list it.

Solution 1 — sign out and sign back in

This resolves the great majority of cases. Try it first.

Confirm in SVIEW that your access request is Approved. If it is
still pending, wait for approval before continuing.
Sign out of Teleport completely — in the web interface use Log Out, and
in Teleport Connect sign out of the cluster.
Sign back in to Teleport.
Verify: the resources covered by your request now appear in the resource
list.

If you use the tsh command line client, sign out and back in there too:

tsh logout --proxy teleport.manage.cto2b.eu
tsh login --proxy teleport.manage.cto2b.eu
tsh status

tsh status lists the roles attached to your session. The roles matching
your approved request should be present.

Solution 2 — check what your approved access actually covers

If the resources are still missing after a fresh sign-in, your session is
probably working correctly but the approval did not cover what you need.

Open your Teleport profile and note the roles listed against your
user, or run tsh status and read the Roles line.
Compare those roles with the environment and resource you were expecting
to reach.
If the resource you need is not covered, raise a request in SVIEW for
the specific environment and resource, rather than adjusting anything
yourself. Role and permission configuration is managed by CTO2B and cannot
be changed from your side.

Prevention

Request access before you begin work, and sign in to Teleport only after
the request is approved.
Name the exact environment and resource in the request, so the grant covers
what you actually need on the first attempt.

Still having issues?

Raise a Service Desk ticket or post in your dedicated Slack channel,
including your approved request reference and the exact message Teleport
shows. See Getting Help.