New Dynamics 365 browser extension
I'm trying out the new -Power Roles- extension and it looks very promising.
You browse to a Dynamics 365 (or Power Apps) app and then you press -record-.
It will then monitor all the action you do in the app and propose which permissions you need to execute them.
It can even create or edit a security rol with those permissions for you.
Powerful!
https://microsoftedge.microsoft.com/addons/detail/power-roles/hbjkmplgempdbiffddnneofdfedmmbpo