A preview deployment signs in with a lower-privilege identity and the later promote step assumes those same credentials are still sufficient during a failover rehearsal

The early environment works, but the promotion path needs a broader scope that the pipeline never refreshes. Normal traffic masked the issue until the standby or alternate path became active under rehearsal conditions.