Instead we could simply write "You're not logged in" if the user is actually not logged in. Maybe there would be even no error message needed as it's kinda obvious when showing the login form.
We still need to show above error message "...requires at least 'view' access" if user is logged in, but has not access to the selected website
we noticed we have already a message for API
You must be logged in to access this functionality.