Troubleshoot users and authentication

Note the time, the site, and what went wrong. Never attach a password, session value, or token.

Organization or site access is missing#

Confirm the membership and selected sites, correct them in organization members, then verify the site user.

Creating, changing, or deleting users fails with `403`#

The caller needs organization access or a Super Admin app role to create, update, or delete site users, and organization access to assign or revoke roles. See Who can manage users.

Role or app access is wrong#

Record the username, role, and app, re-read the access in assign user access, then correct the Site Role or retry the assignment.

An attribute or mapping is absent#

Confirm schema validation in user attributes, then test and correct the mapping in referenced user attributes.

Preferences didn't persist#

Re-read the current user's settings in user preferences, correct the rejected value, and retry with an authenticated credential.

Check security.signup-enabled, the invitation details, and the retry outcome in hosted sign-in.

A token action fails#

Check the token's name, owner, and expiry in API tokens; revocation returns 200. Create, store, and test a replacement before you revoke the old token.

Correct the provider fields or handle connected users in OpenID Connect SSO, then retest.

Contact TaruviBase support with the smallest redacted reproduction and the selected Console site or hosted URL. Do not include confidential identity data.