Your account does not have permission to create iOS distribution certificates

Question

I want to upload my app to testflight. when I upload the app Xcode shows this error:

your account does not have permission to create ios distribution

Answer 1

This seems to be a bug or poorly described feature in iTunes Connect & the Apple Developer portal.

I had a developer that joined my team, initially as a "member", but wasn't able to create certificates, even after giving him admin access. It turns out, that I believe we were only giving him admin access to Itunes connect, but not to the developer page.

The correct fix was to go to the developer portal, click the "People" tab (or go to this URL https://developer.apple.com/account/#/people/), remove his access, then use the Invite as Admins to add him to the account. He then had to go into Xcode and remove his developer account information, add it back in, and then he was finally able to upload builds to Testflight without this error.

Answer 2

If you are getting the same error...Create the .ipa file and upload to https://www.diawi.com/

you will get an link, which you can share with your client.It's not a solution for your question but it will help you.

Answer 3

For anyone finding this now: Team Agent no longer exists. If your role is Admin or App Manager you can upload builds and create provisioning profiles, etc. Note that if you get this error when you upload, then ask for the correct permissions and it still doesn't work, quit Xcode and try again!

Answer 4

Perhaps your provisioning profile was expired and even after updating it from Apple's developer website, Xcode doesn't try to fetch the new one.

Here's how to solve it:

1. Xcode -> preferences -> accounts
2. Select your Apple ID, and on the right bottom pane select your team and click View Details
3. Under provisioning profile, find your expired profile, right click, and click Move to Trash
4. You should be able to sign and upload your app.

Answer 5

1. Using keychain, export valid certificate on a computer on which iOS distribution signing identity works. You need two files, one is public - <fileNamePublic>.pem file, and other is private - <fileNamePrivate>.p12 file.

2. Put those files in a folder on computer on which you need signing identity to work.

3. Open terminal and browse to the folder you've put them in.

4. First, type: security import <fileNamePrivate>.p12 -k ~/Library/Keychains/login.keychain

5. Then type: security import <fileNamePublic>.pem -k ~/Library/Keychains/login.keychain

6. Open XCode, go to XCode>preferences>accounts>view details and refresh the apple id you are using

7. You should have signing identities enabled.

Answer 6

This should be the user permission issue. Please note that only user with Team Agent role has permission to generate certificates for distribution of app outside the App Store. I believe, you are not in Team Agent role. Please double check your permissions.

You can even generate a Certificate Signing Request and send it to your Team Agent. Get back the created certificate from the Team Agent and use it to sign apps.