I agree - the UI is quite granular. Many users will land there just wanting to get a change checked in, so will likely rush the decision. How about least privi

I agree - the UI is quite granular. Many users will land there just wanting to get a change checked in, so will likely rush the decision. How about least privilege first, then try a build cycle and re-assess any missing permissions flagged up?