Identity governance dashboard with automated access reviews
You are building "AccessLedger," a multi-tenant SaaS for identity governance: access reviews + self-service access requests, driven entirely by read/write APIs into the customer's identity and SaaS stack. No agents. GLOBAL CONSTRAINTS (apply to every step): - State budget is 1GB hard cap. Connected systems are the source of truth. Persist ONLY: normalized entities, current-state snapshots, deltas, and decisions/audit. Never cache raw API responses or bulk logs. Offload any exported artifacts (CSV/PDF evidence) to object storage and store a reference. - Multi-tenant with strict row-level isolation from day one. - Use the platform's built-in auth, secrets vault, encryption, and audit primitives — do not re-implement them. Wire into them. - Least-privilege OAuth scopes per connector; write scopes gated separately from read scopes. - Build incrementally. After each step, output what was built and a self-check against the "Done when" criteria before proceeding. STEP 1 — Scaffold & architecture Stand up the app shell, multi-tenant context, config, and a health check. Define the module boundaries: connectors, sync, review engine, request engine, ai, governance, ui. Done when: a tenant can be created and isolated; health check passes.
What this prompt builds
This workflow creates a unified identity governance dashboard that consolidates access requests, permissions, and policy compliance data from multiple systems. It pulls information from ticketing tools and connected applications to provide visibility into who has access to what, for how long, and whether it aligns with governance policies. The solution offers both real-time oversight and automated access reviews against established access grants.
The problem
IT and security teams struggle to maintain visibility into access requests and permissions when data is scattered across ticketing systems, apps, and identity providers. Understanding who has access to what resources, for how long, and whether those grants align with governance policies requires manual cross-referencing and creates compliance risk. This workflow builds a unified dashboard that consolidates access request data from all connected systems, maps permissions to governance policies, and surfaces how long access has been granted—giving teams a single source of truth for identity governance and access reviews.
Solution and impact
The workflow delivers a consolidated view of all access requests, active permissions, and policy alignment in one dashboard, eliminating the need to check multiple ticketing tools and applications. It automatically reviews current access grants against governance policies, surfacing violations and approaching expirations so teams can act before compliance issues arise. Security and IT teams save hours previously spent on manual audits and gain continuous, real-time oversight of their identity governance posture.