aio admin context (context with the “admin” role)

which two verification steps should be performed if a user context does not pass user traffic?