access.principal.reader-resolves-readonly
- Probe surface: access
- Run: enterprise-reader/20260828-initial
- Question: Does the nominated account resolve read-only, and to what claims LoginName?
machine
- Recorded as:
A1 - Outcome:
NOT ESTABLISHED (prerequisite) - Evidence: READER_UPN is still the placeholder. Set it to the service account UPN and paste again.