Select your OS. Then review each permission category - who legitimately needs it, who never should, and how to revoke it.