How should least privilege be designed for production?

For production, scope identities per workload, separate read and write permissions, use short-lived credentials, review privileges regularly, remove unused access, and require elevation for exceptional administrative actions. Add automated tests and observability around the critical behavior, document ownership and failure handling, and review the design when traffic, dependencies, or security requirements change.