Get/Put Alternate Contact Details

Hello

I am using boto3 through AWS CLI to find/update alternate contact details. Despite of administrator keys, I was getting access denied error. This error was resolved in DEV environment once I enabled AWS Trusted Advisor Service on AWS Accounts console dashboard. However in PROD environment, it still gives access denied error. Few months back,, enabling Trusted Advisor had worked for both environments.

What could be the reasons, and what is a resolution? Thanks.

Sample error

botocore.errorfactory.AccessDeniedException: An error occurred(AccessDeniedException) when calling the GetAlternateContact operation: User: arn:aws:sts::**acct_id**:assumed-role/AWSReservedSSO_AdministratorAccess_3333/**email** is not authorized to perform account:GetAlternateContact