403 forbidden error when grant admin privilege to a user

I tried to disable the enforce second factor on external auth, still 403, is anything else I missed configured?