Overview
Why this exists, what it does, and the part I owned.
Problem
Enterprises running Microsoft Entra ID review who has access to what by hand, out of spreadsheets sent to dozens of managers. Privilege creep accumulates with no clear owner.
What I built
Productized a tool originally delivered for a real enterprise client into a multi-tenant SaaS, with an inference engine that auto-drafts a full review model on connect.
My role
Owned the PRD end to end (84 requirements across MVP, Phase 2, Phase 3), and defined the audit-trail model behind every decision.
Impact
Replaced manual, spreadsheet-driven reviews with an auditable workflow that generates a compliance document automatically.
Monthly Review · Cybersecurity 100% complete
The inference engine auto-drafted this cycle's review model on connect. Owners approved or rejected every membership below, each decision captured with who, when, and why.
Access risk breakdown 2 critical
Every membership decided this cycle, scored by risk tier at the moment of review.
| Event | Group | Reviewer | Time |
|---|---|---|---|
| ✓Approved member | Cyber Leadership | JAJ. Alvarez | 2:41 PM |
| ✕Rejected member | Cyber Leadership | JAJ. Alvarez | 2:38 PM |
| ⟳Review unit complete | Cyber Leadership | JAJ. Alvarez | 2:38 PM |
| ✓Approved member | Finance-Admins | MOM. Osei | 1:14 PM |
| ⎘Compliance PDF generated | All groups | SYSystem | Cycle close |
My Review Tasks 9/31 reviewed
Groups assigned to you for this cycle. Open a review to approve, reject, or comment on each membership.
Cross-System Conflicts 13 pending
Flagged when reviewers disagree on the same identity across two systems, or a decision contradicts a policy template.
| Group | Member | System A | System B | Status |
|---|---|---|---|---|
| SEC-ENG | Member #4471 | Approve | Reject | Pending |
| DATA-RW | Member #2290 | Approve | No decision | Pending |
| Prod-Infra-RW | Member #8842 | Reject | Reject | Auto-resolved |
Snapshot Browser Daily
Every connected directory is snapshotted daily. Compare any two snapshots to see what changed.
| Snapshot | Size | Change | |
|---|---|---|---|
| May 20, 2:38 PM | 271.6 MB | +0.4% | |
| May 19, 2:38 PM | 270.5 MB | +0.1% | |
| May 18, 2:38 PM | 270.1 MB | +0.2% |
System Settings
Each connected directory gets an owner, a default policy template, and a fallback for unmapped groups.