Email must be verified and your account must have the web_admin or super_user role, with 2FA enabled.
web_admin
super_user