Access Problems
Login, role, capability, and tenant-visibility issues — what to check and in what order.
Access problems are almost always one of: wrong role, missing capability, missing elevation, or wrong tenant context. Check in that order.
Diagnosis order
- Can the user log in at all? If not, the issue is upstream — auth provider or credentials.
- Does the user have the right role? See Authority Model.
- Has the user elevated? Many capabilities require step-up elevation, recorded in
operator_audit_events. - Is the tenant context correct? Row-level security will silently hide rows from the wrong tenant — see Tenant Setup.
- Is the capability Phase-C locked? Phase-C operator capabilities are stripped from every effective capability set and cannot be invoked.
Related
- Security Model — RBAC, encryption, isolation.
- Common Issues — symptom index.
You are here · Troubleshoot · step 3
Recovery Proceduresnext step
Next in Troubleshoot: Recovery Procedures.
What should I do next?
Common Issuesprimary
continues in "troubleshoot"
Ranked using IA v1 graph + intent map + glossary density (deterministic; no AI inference).