When two users should have the same application access but only one does, manually comparing Active Directory groups is a terrible debugging workflow. I built an internal TypeScript tool that turns that comparison into a structured troubleshooting process.