RBAC troubleshooting
Applies to Enterprise ManagementField App
- A role’s permissions don’t seem to apply: confirm the role name matches your identity provider’s role claim exactly, including case.
- Role name and case already check out, but it still doesn’t apply: confirm the Enterprise Management and Field App projects are assigned the same Identity Provider (see Before you enable RBAC) — a mismatch means the role you configured may not be the role a Field App session actually receives.
- A user has more or less access than expected: check whether that user has more than one role assigned by your identity provider — if any of their roles grants a privilege at a site, they have it, even if another one of their roles doesn’t.
- Everything is Read-only unexpectedly: this is the fail-safe behavior — if the underlying configuration is unreadable or invalid, the app falls back to Read-only for everyone. Contact your SiteSync representative to confirm the underlying configuration is intact.
- Not sure this applies to a particular app: RBAC only governs the Field App. The Enterprise Management app and Site dashboards are unaffected.