A step further would be giving the user the ability to request the required permission through some kind of approval process that would let the admin easily approve the permissions that were needed for the action.

Additionally, it is common for more than one permission to be required for an action to be taken, or for a page to be navigated to. When this happens and the user is denied, knowing all of the permissions that were going to be required at the time of the approval request would be greatly helpful. What happens now is a user runs into the permission error, it gets resolved, and then they try it again just to be met with another permissions problem.

The permissions recorder is a great feature, but the approval request would be a really great addition.