I guess you are not using management tenant credentials but only Enterprise Tenant credentials. Management tenant is the tenant who is managing the whole instance. On public environments this is only accessible by OPS. Enterprise Tenant is a tenant to create and suspend subtenants only.