Permissions are product design. They define which actions an agent can take without asking and which moments require a person.

Start narrow

Use read access before write access, and draft actions before irreversible ones. A narrow permission set is easier to explain and easier to revoke.

Escalate with context

When more access is needed, show the requested action and the reason. Permission prompts should help people decide, not simply block them.