You are setting up a new AlloyDB instance and want users to be able to use their existing identity and Access Managemen (IAM) identities to connect to AlloyDB. You have performed the following steps:

Manually enabled IAM authentication on the AlloyDB instance

Granted the allowdb-databaseUser and serviceusage.serviceusageConsumer IAM roles to the users

Created new AllowDB database users based on corresponding IAM identities

Users are able to connect but are reporting that they are not able to SELECT from application tables. What should you do?