If an RSA Archer user cannot see an application that does exist within the system, what should the administrator check first?

Group membership alone does not grant application access; roles - which may be assigned directly or inherited through a group - are what determine application-level access.

In RSA Archer, access to applications is governed by roles assigned to users, either directly or through group membership. If a user cannot see an application that exists, the most probable and foundational cause is that none of their assigned roles grant access to that application. Checking role assignment addresses the primary access layer before investigating more granular settings like record or field permissions.

Record Permissions fields control access to individual records within an application, not visibility of the application itself in the navigation.

Private field access rights govern whether a user can see specific fields inside an application they can already access, not whether the application is visible to them at all.