Troubleshooting#

The log has the details: Tools, Open the logs folder. It never contains tokens or your PDF, so it's safe to send.

"AKC AUP isn't set up in this tenant yet": A Cloud Application Administrator needs to run Tools, Set up this tenant once. See Before you start.
"Its permissions need admin consent" (AADSTS65001): The registration exists but consent hasn't been granted, or a new version asks for a new permission. Run Set up this tenant again: it's safe to repeat.
The browser says "localhost refused to connect": The browser finished signing in, but AKC AUP had stopped waiting for it, for example because the sign-in took a while, an older sign-in tab was used, or AKC AUP was closed in the meantime. Close the sign-in tabs and try again, finishing in the tab it opens.
Read only, or "needs attention" in the header: Select the account at the top right to see why: a missing role, the Entra ID P1 licence, or consent. If you have Conditional Access Administrator through PIM, activate it, then sign out and in again.

Deploying#

"These already exist in the tenant": A Terms of Use or policy with the same name is already there. Rename yours in steps 3 or 5, or remove the old one. Nothing was created.
"That isn't a PDF" or "Keep it under 3 MB": Terms of Use only accepts PDF files. Save the document as a PDF, and reduce image quality if it's large.
"Choose the break-glass group": AKC AUP won't deploy without one. Create a group for your emergency access accounts, then choose it in step 1.
It stopped part-way: AKC AUP offers to roll back what it created. Or keep it and use Change this deployment. The record shows each step.
Nobody is asked to accept: The policies are report-only until you switch them on. Check the Report-only tab in a sign-in log to see what would happen, then switch them on with Change this deployment.

"This record was made by an earlier build": Records from before 1.0.1 don't hold Entra's IDs. Change it in the Entra admin centre, or roll it back and deploy again.
"…isn't in the tenant any more": Something was removed outside AKC AUP. Roll the deployment back to tidy up what's left, then deploy again.
The PDF or re-acceptance can't be changed: Entra fixes them once Terms of Use exist. Deploy new terms with the change instead.