Ask HN: How do folks distribute permissions in IAM(GCP, AWS) to developers?

How do folks distribute permissions in IAM(GCP, AWS) to developers ? What does the request-approve cycle look like ? (e.g. jira tickets, slack requests, gitops etc.)