Pick a role → pick a real actor → click. See the governing Rego, the generated SQL, the no-drift verdict, and per-row allow/deny. No typing.