Artifact Signing organization identity validation: "You need permission" despite matching sign-in email

1. The documented requirement for the access error is that the email address entered in the identity validation request must be the same email address used to sign in to access the identity validation link. When the page shows "You need permission to access this page", the documented cause is an email mismatch between the email in the individual identity validation request and the email used for sign-in.
2. For the current request, the supported troubleshooting path is:
   1. Confirm the sign-in email exactly matches the email entered in the validation request.
   2. Check whether the verification email was missed. Verification links expire after seven days.
   3. Check Junk or Spam, and confirm the mailbox accepts messages and links from external senders.
   4. Ask the email administrator to confirm firewall, security, or mail filtering policies are not blocking the message.
   5. If the verification email cannot be found, or the link has expired, delete the current identity validation request and submit a new one.
   Additional documented constraints:
   • A new verification link cannot be resent for the same request.
   • If email validation shows Failed, create another identity validation request.
   • Creating more identity validation requests for the same entity while one is already in progress does not help.
3. For support, the documented routes are:
   • Create a support ticket in the Azure portal.
   • Use Microsoft Q&A with the tag artifact-signing.
4. The available context does not document whether organization identity validation requires a personal Microsoft account or a work/school account.

References:

• Artifact Signing FAQ
• Quickstart: Set up Artifact Signing