Email client needed file sharing with "proper" access management. Specification required technical permission controls.
Users don't want to "manage permissions". They want to share with Anna.
A couple of iterations led to this: Type a name, click, share. No permission matrices. No technical jargon. Just the way people actually think about sharing.
Result: People reach their goal without thinking about "permissions".
Dozens of paper sketches explored different approaches. Each iteration got closer to the user's mental model: thinking in terms of people, not permissions.