The sitemap must be accessible to Googlebot, and must not be blocked by any login requirements. You can test if the sitemap is accessible to Googlebot by seeing if you can browse to the sitemap URL in incognito mode.