403 forbidden error when grant admin privilege to a user

I believe you need to be autheticate with 2fa yourself or disable it in your own user preferences like what Moin described above. I don’t know how your external authentication is configured though. I can reproduce the 403 you described, but with my correct 2fa code, it allows me to perform the admin action.