Read API documentation for internal field names - Examine API responses for fields not present in input forms - Use GraphQL introspection to discover all fields on a type - Try adding common privileged field names: `role`, `admin`, `verified`, `active`, `permissions`, `group`, `level`, `tier`