What happens if a user loses access?

We check whether the account is disabled, the role has changed, the password has expired, or external authentication has an issue. An authorized administrator can restore access following the procedure, keeping logs and the principle of least privilege instead of granting excessive permissions for a quick fix.