Permissions are product design. They define which actions an agent can take without asking and which moments require a person.
Start narrow
Use read access before write access, and draft actions before irreversible ones. A narrow permission set is easier to explain and easier to revoke.
Escalate with context
When more access is needed, show the requested action and the reason. Permission prompts should help people decide, not simply block them.




