Answer
Review the permissions against the operational need, deny unnecessary access where practical, and understand what data the application collects or shares before approving it for the fleet.
Explanation
Every permission expands the information and device functions available to the application. The operator should be able to justify that access.