2660650 - HTTP 403 Forbidden error occurs while accessing "Configure Process Integration" in SAP Cloud Platform Cockpit

Note:

"Configure Process Integration" is only used in the following cases:
  - for Subscription and CPEA accounts - to enable Enterprise Messaging and/or Integration Advisor.
  - for CPEA accounts - to provision CPI service/tenant, or to change tenant environment (Prod / Non-Prod).
See this blog.

So far in many cases, you don't have to access "Configure Process Integration" to design iFlows, run messages and monitor CPI tenant. 
If you encounter HTTP 403 Forbidden error while accessing your CPI tenant (https://xxxxxx.hana.ondemand.com/itspaces), check SAP KBA 2543001 - How to grant access to CPI tenant.

In SAP Cloud Platform Cockpit you have enabled "Service: Process Integration" under your Subaccount.
When you click on "Configure Process Integration", a new page (e.g. with URL https://provisionhcisvc-xxxx.hana.ondemand.com/tenantadmin) pops up but your access fails with error HTTP Status 403 - Forbidden.

SAP Cloud Platform

Process Integration, Cloud Integration, SAP Cloud Platform, SCP, SAP Cloud Platform Cockpit, provisionhcisvc, Authorization, user, HTTP 403 , KBA , LOD-HCI-PI-OPS , SAP Cloud Platform Integration Operations , LOD-HCI-PI-PRV , CPI Provisioning App , Problem