308—User trying to set a security-label they do not have
Indicates that CA ControlMinder denied an attempt to assign a security label to a user, because the user attempting to assign the security label does not possess that security label themselves.