Answer
Rejecting an authorization step is typically its own separate grantable action from approving one — check that the reject-specific action is included in the authorizer's permission set, not just the general authorization/approval grant.
Rejecting an authorization step is typically its own separate grantable action from approving one — check that the reject-specific action is included in the authorizer's permission set, not just the general authorization/approval grant.