Access is decided by the live gate, not by this page.
Grants made here are mirrored into it automatically, and each action reports
whether the mirror succeeded. Identity v2 — the model this console edits —
is not yet the thing that admits anyone. If a grant here does not let someone
in, check customer_users and customer_user_grants
before assuming the person is wrong.