title: implicit policy evaluation failed - ... requires 1 of the 'Writers' sub-policies to be satisfied: permission denied
body: <p>I am getting this error while creating channel</p>
  <pre><code>implicit policy evaluation failed - 0 sub-policies were satisfied, but this policy requires 1 of the 'Writers' sub-policies to be satisfied: permission denied
  </code></pre>
  <p>Here is my congigtx.yaml file</p>
  <pre><code>Organizations:
  - &amp;OrdererOrg
      Name: OrdererOrg
      ID: OrdererMSP
      MSPDir: crypto-config/ordererOrganizations/vrs.com/msp
      # AdminPrincipal: Role.ADMIN
      OrdererEndpoints:
          - orderer.vrs.com:7050
  
      Policies:
          Readers:
              Type: Signature
              Rule: &quot;OR('OrdererMSP.member')&quot;
          Writers:
              Type: Signature
              Rule: &quot;OR('OrdererMSP.member')&quot;
          Admins:
              Type: Signature
              Rule: &quot;OR('OrdererMSP.admin')&quot;
  
  - &amp;Excise
      Name: ExciseMSP
      ID: ExciseMSP
      MSPDir: crypto-config/peerOrganizations/excise.vrs.com/msp
      # AdminPrincipal: Role.ADMIN
      AnchorPeers:
          - Host: peer0.excise.vrs.com
            Port: 7051
      
      
  
      Policies:
          Readers:
              Type: Signature
              Rule: &quot;OR('ExciseMSP.admin', 'ExciseMSP.peer', 'ExciseMSP.client')&quot;
          Writers:
              Type: Signature
              Rule: &quot;OR('ExciseMSP.admin', 'ExciseMSP.client')&quot;
          Admins:
              Type: Signature
              Rule: &quot;OR('ExciseMSP.admin')&quot;
          Endorsement:
              Type: Signature
              Rule: &quot;OR('ExciseMSP.peer')&quot;
  
  - &amp;Manufacturer
          Name: ManufacturerMSP
          ID: ManufacturerMSP
          MSPDir: crypto-config/peerOrganizations/manufacturer.vrs.com/msp
          # AdminPrincipal: Role.ADMIN
          AnchorPeers:
              - Host: peer0.manufacturer.vrs.com
                Port: 9051
      
          Policies:
              Readers:
                  Type: Signature
                  Rule: &quot;OR('ManufacturerMSP.admin','ManufacturerMSP.peer','ManufacturerMSP.client','ExciseMSP.admin','ExciseMSP.peer','ExciseMSP.client')&quot;
              Writers:
                  Type: Signature
                  Rule: &quot;OR('ManufacturerMSP.admin', 'ManufacturerMSP.client')&quot;
              Admins:
                  Type: Signature
                  Rule: &quot;OR('ManufacturerMSP.admin')&quot;
              Endorsement:
                  Type: Signature
                  Rule: &quot;OR('ManufacturerMSP.peer')&quot;
  - &amp;Dealer
          Name: DealerMSP
          ID: DealerMSP
          MSPDir: crypto-config/peerOrganizations/dealer.vrs.com/msp
          # AdminPrincipal: Role.ADMIN
          AnchorPeers:
              - Host: peer0.dealer.vrs.com
                Port: 11051
      
          Policies:
              Readers:
                  Type: Signature
                  Rule: &quot;OR('DealerMSP.admin','DealerMSP.peer','DealerMSP.client','ExciseMSP.admin','ExciseMSP.peer','ExciseMSP.client')&quot;
              Writers:
                  Type: Signature
                  Rule: &quot;OR('DealerMSP.admin', 'DealerMSP.client')&quot;
              Admins:
                  Type: Signature
                  Rule: &quot;OR('DealerMSP.admin')&quot;
              # Endorsement:
              #     Type: Signature
              #     Rule: &quot;OR('DealerMSP.peer')&quot;
  
  Capabilities:
      Channel: &amp;ChannelCapabilities
          V2_0: true
  
      Orderer: &amp;OrdererCapabilities
          V2_0: true
  
      Application: &amp;ApplicationCapabilities
          V2_0: true
  Application: &amp;ApplicationDefaults
      Organizations:
      Capabilities:
            &lt;&lt;: *ApplicationCapabilities
      ACLs: &amp;ACLsDefault
          lscc/ChaincodeExists: /Channel/Application/Readers
          lscc/GetDeploymentSpec: /Channel/Application/Readers
          lscc/GetChaincodeData: /Channel/Application/Readers
          lscc/GetInstantiatedChaincodes: /Channel/Application/Readers
          qscc/GetChainInfo: /Channel/Application/Readers
          qscc/GetBlockByNumber: /Channel/Application/Readers
          qscc/GetBlockByHash: /Channel/Application/Readers
          qscc/GetTransactionByID: /Channel/Application/Readers
          qscc/GetBlockByTxID: /Channel/Application/Readers
          cscc/GetConfigBlock: /Channel/Application/Readers
          cscc/GetConfigTree: /Channel/Application/Readers
          cscc/SimulateConfigTreeUpdate: /Channel/Application/Readers
          peer/Propose: /Channel/Application/Writers
          peer/ChaincodeToChaincode: /Channel/Application/Readers
          event/Block: /Channel/Application/Readers
          event/FilteredBlock: /Channel/Application/Readers
      Policies: &amp;ApplicationDefaultPolicies
          Readers:
              Type: ImplicitMeta
              Rule: &quot;ANY Readers&quot;
          Writers:
              Type: ImplicitMeta
              Rule: &quot;ANY Writers&quot;
          Admins:
              Type: ImplicitMeta
              Rule: &quot;MAJORITY Admins&quot;
          LifecycleEndorsement:
              Type: ImplicitMeta
              Rule: &quot;MAJORITY Endorsement&quot;
          Endorsement:
              Type: ImplicitMeta
              Rule: &quot;MAJORITY Endorsement&quot;
  
  Orderer: &amp;OrdererDefaults
      OrdererType: etcdraft
      Addresses:
          - orderer.vrs.com:7050
      EtcdRaft:
          Consenters:
          - Host: orderer.vrs.com
            Port: 7050
            ClientTLSCert: crypto-config/ordererOrganizations/vrs.com/orderers/orderer.vrs.com/tls/server.crt
            ServerTLSCert: crypto-config/ordererOrganizations/vrs.com/orderers/orderer.vrs.com/tls/server.crt
      BatchTimeout: 2s
      BatchSize:
          MaxMessageCount: 10
          AbsoluteMaxBytes: 99 MB
          PreferredMaxBytes: 512 KB
      Policies: &amp;OrdererDefaultPolicies
          Readers:
              Type: ImplicitMeta
              Rule: &quot;ANY Readers&quot;
          Writers:
              Type: ImplicitMeta
              Rule: &quot;ANY Writers&quot;
          Admins:
              Type: ImplicitMeta
              Rule: &quot;MAJORITY Admins&quot;
          BlockValidation:
              Type: ImplicitMeta
              Rule: &quot;ANY Writers&quot;
      Organizations:
  
  
  Channel: &amp;ChannelDefaults
      # Policies defines the set of policies at this level of the config tree
      # For Channel policies, their canonical path is
      #   /Channel/&lt;PolicyName&gt;
      Policies:
          Readers:
              Type: ImplicitMeta
              Rule: &quot;ANY Readers&quot;
          Writers:
              Type: ImplicitMeta
              Rule: &quot;ANY Writers&quot;
          Admins:
              Type: ImplicitMeta
              Rule: &quot;MAJORITY Admins&quot;
  
      Capabilities:
          &lt;&lt;: *ChannelCapabilities
  
  Profiles:
      Genesis:
          &lt;&lt;: *ChannelDefaults
          Orderer:
              &lt;&lt;: *OrdererDefaults
              Organizations:
                  - *OrdererOrg
              Capabilities:
                  &lt;&lt;: *OrdererCapabilities
          Consortiums:
              MainConsortium:
                  Organizations:
                      - *Excise
                      - *Manufacturer
                      - *Dealer
                      
      Channel:
          Consortium: MainConsortium
          &lt;&lt;: *ChannelDefaults
          Application:
              &lt;&lt;: *ApplicationDefaults
              Organizations:
                  - *Excise 
                  - *Manufacturer 
                  - *Dealer 
                                 
              Capabilities:
                  &lt;&lt;: *ApplicationCapabilities
  </code></pre>