Granting permissions to roles rather than to individuals, so access follows a person's job and changes when the job does.
Per-user permissions become unmanageable at about thirty people, and leavers keep access nobody remembers granting — which is exactly what auditors look for.
We model roles against real responsibilities early, enforce them on the server rather than by hiding buttons, and make permission changes auditable.