Coolify's permission guide ties a token to the team active when it was created; switching teams later does not retarget it. In a Coolify integration, record that team association explicitly.
Also distinguish ordinary read access from sensitive-field access. A redacted response may be correct permission behavior, not corrupted resource data.
Akousa