If it's a 403, it's likely due to wrong permissions. The user performing the operation must have settings:manage permissions at the right scope.
If the user registry was created in the Cloud Manager, and shared with the provider organizations, you will have to do it as the Cloud Admin (or any Cloud Manager user with settings:manage permissions at the Cloud Org).
------------------------------
Nisha Narayanan
------------------------------