Users in one organizational unit cannot access a service, while equivalent users elsewhere can. Which approach best fits?

1. Verify identity mapping and relevant IdP and Workspace authentication events.
2. Compare effective service policy and inheritance for the affected unit.
3. Use Email Log Search with the relevant sender, recipient, and time range.
4. Check the Google Workspace Status Dashboard and correlate local symptoms.