Your MCP Works for You—but Not Your Coworkers: The Azure Allowlist Trap

A troubleshooting guide to the overlapping Entra assignment and Azure Container Apps authorization lists that can reject valid remote MCP users before requests reach application logs.