...
See How to Activate Profile Grants for a step-by-step guide.
Changing the Level of Profile Grants
Make sure the Level of the profile grants meets the needs of the organization. Both birthright and suggested levels are pre-approved for access reviews and provisioning. The difference between the two is seen with provisioning. Birthright level permissions can all be assigned together in a policy action but suggested level permissions need to be requested separately. Level accuracy is the responsibility of the Application’s Technical Owner (by default) but any admin can also activate a profile grant.
See How to Change the Level of a Profile Grant for a step-by-step guide.
Customizing Profile Generation
...