Two permission layers: management-plane vs data-plane
Seeing a resource isn't the same as having access to the data inside it. Management-plane access: discover and view resources. Data-plane access: read/write blobs and files. Common symptom: 'I can see it, but can't open data'. Fix mindset: verify identity plus roles plus permissions scope.