Permission fatigue is the habit of approving repeated security prompts without stopping to evaluate each one carefully. It happens when users see too many dialogs, consent requests, or warnings and start clicking through them automatically to keep work moving.
This matters because security prompts are meant to be a control point, not a formality. Attackers can exploit fatigue by triggering many requests until a risky one is accepted, or by hiding a dangerous action inside a long workflow. In AI-assisted tools, repeated approval requests can also train users to trust the system too much. Defenses include reducing unnecessary prompts, grouping related actions, enforcing least privilege, using sandboxing, and reserving explicit review for high-risk or destructive operations.