Ensure a purchased upgrade is applied after receiving payment (aka ignore the canPurchase check run when applying an upgrade).
The canPurchase was unexpectedly running under the guest user which produced incorrect outcomes when applying 'usable by user groups'.
It is strongly recommended that a manual audit of monthly user upgrades is done to verify the upgrade was applied, and if not apply a manual upgrade with the expected start/end date.