Time and time again, I find myself in situations where I have to login as service accounts to debug permissions. One easy way to do that is by using:
su - jenkins -s /bin/bash
su - nagios -s /bin/bash
su - mysql -s /bin/bash
In short just replace the username with service name you want to debug.