Answer
Check the status of the identity/IAM pod in the cluster before investigating application-level permissions — this specific symptom right after opening the application, following an upgrade, commonly traces back to the IAM component not being fully up and ready rather than a user-permission problem.