---
title: Runbook — AUTHZ_TENANT_MISMATCH (테넌트 cross-access 시도)
category: AUTHZ
error_codes: [AUTHZ_TENANT_MISMATCH]
severity: P1
owner: oncall
last_updated: 2026-06-15
status: stub
---

# Runbook: AUTHZ_TENANT_MISMATCH (`runbook://authz/tenant-mismatch`)

## Symptoms

- HTTP 403 with `error.code=AUTHZ_TENANT_MISMATCH`
- `log_level=ERROR` — cross-tenant access attempt detected

## Diagnosis

- Extract `traceId`, check `X-Tenant-Id` vs token tenant claim
- Determine if this is misconfigured client or intentional attack

## Action

- Block repeat offenders at gateway level
- Alert security team for investigation

## Escalation

- P1 if confirmed malicious cross-tenant access attempt

---

> **Stub**: Phase D2 — author body after domain adoption. (feature-operational-runbook-contract D9)