P0 helps my team effectively assign the minimum-level or read-only access to all of our cloud computing resources. When engineers need elevated privileges or want to make production changes, they request access and another team member approves the access. P0 assigns the engineer the correct access, logs the access, and removes it at the end of the session. As a result we have clean IAM groups and policies and our team knows that their base access can't be exploited.