No subscriptions or clusters
Confirm the intended tenant, administrator consent, subscription, principal, and Discovery Reader assignment scope. A role definition existing in the subscription is not proof that the principal has an assignment.
Cluster reads fail
Confirm the AKS resource still exists and the Evidence Reader assignment targets that resource and the correct principal. Review the exact capability and error. Do not assign Contributor or Owner as a shortcut.
Metrics are unavailable
A permission denial and missing monitoring data need different fixes. Check Managed Prometheus configuration, workspace wiring, required retained series, and whether the cluster is running. Use the current portal’s remediation guidance for the diagnosed capability.
Recheck and escalate
After a targeted correction, retry the failed check. If it still fails, share the time, action, redacted error, and any displayed request identifier. Diagnostic button names and automated checks remain pending verification in the deployed interface.