Authentication Issue: noMatchingRole

We have a production application and are using the gql App Service. There appears to be some issues with authorization rules which is a serious problem. At seemingly random times, user calls will return empty and the logs show "noMatchingRole": <x amount of documents that shouldve been returned>

There are actually a handful of these reports in the community with no resolution. One person said they tore down there environment, copied over the rule and it worked fine. I really do not want to do that but we don’t know where else to look. I have filed a ticket and none of the proposed solutions work.

Our rule calls an authorization function with a handful of arguments. I don’t understand exactly what causes noMatchingRole. Understanding this seems to be the first step in figuring this out since nothing logs except that. How can we figure out what causes it to evaluate to noMatchingRole?