Copy-paste and run. The SQL Editor runs as a privileged role, so it bypasses RLS and the MCP read-only restriction.
grant select on public.subscriptions to authenticated;
grant select on public.tier_limits to anon, authenticated;Look the id up first — never paste a real user id into a doc or a ticket.
select id, email from auth.users where email = 'operator@example.com';
update public.subscriptions
set tier = 'enterprise', status = 'active', trial_ends_at = null, updated_at = now()
where user_id = '<user-uuid>';select tier, status, public.effective_tier(user_id) as effective
from public.subscriptions
where user_id = '<user-uuid>';
-- expect: enterprise | active | enterpriseTiers: none | analyst | team | enterprise.
-- find the id
select id, email from auth.users where email = 'user@example.com';
-- set the tier
update public.subscriptions
set tier = 'enterprise', status = 'active', trial_ends_at = null, updated_at = now()
where user_id = '<user-uuid>';After running: re-login or hard-reload /app (account page reads fresh; the
data-API tier cache clears within 60 s).