After a least-privilege IAM change, multiple city staff report access denied to the same portal. Some peers in another group still succeed. How should the team troubleshoot authorization?
Select an answer to reveal the explanation.
Short Explanation
Access denied after a least-privilege pass usually means either the policy is too tight or people landed in the wrong group. Compare a working peer's membership and policy with a failing user's before you hand out admin rights.
Full Explanation
Authorization failures after IAM tightening require distinguishing flawed policy statements from incorrect group or role membership. Comparing effective permissions for successful versus failing identities isolates the cause. Blanket administrator rights, shared passwords, or undoing unrelated network ACLs are inappropriate remediations.