Azure management groups

What’s the best way to troubleshoot inconsistent Azure access?

I keep running into cases where an Azure resource exists and appears to be configured correctly, but one person can perform an action while another person cannot. Troubleshooting…