account on web application level no access to site

1. I have added an account (central admin > web application > policy for web application) to the list on all zones, with full control

I now try to logon with that account on a site in a site collection under this web application but it says "sorry this site hasn't been shared with you"

Am i going crazy?