Investigate IRIS tasks and logs, save diagnostic captures and notes, and review administrative changes before applying them.

Run IRIS operational checklists, collect live observations and hand over results with recorded evidence and unresolved steps.

Trace inherited IRIS permissions, review access changes and compare captured security configurations during an access review.