[danaur]

It sounds a lot better. Set up your script and run it and the tool determines the minimum set of permissions needed for future runs. You lock that permission set in for future runs. Read the link

[scoot]

> You lock that permission set in for future runs

Thanks, that was the important bit missing from OP's description.