A command is refused with 409

The management API refuses an approval, a cancellation, or a role assignment with status 409.

Environment

Commands through the management API, from the management application or from a script.

409 means the state doesn't allow the command:

Command	Reason
Submit approval	The order is canceled, expired, already claimed, or finished; only an order in `pending_approval` accepts approvals
Cancel	The order is claimed or finished
Assign role	The role is incompatible with one the person already holds: the auditor role doesn't go with people management or security management; the attempt is recorded in the security audit log

Re-read the order. Commands change states only in the database; the CA worker's result shows up later.
If the order has expired or was canceled, file a new request.
If a certificate was issued despite a late cancellation, it gets revoked; check the entry.
For a role assignment, decide which of the two roles the person keeps, and give the other one to a second person.

The command is accepted, and the re-read order or person shows the expected state.