zen-1 System Requirements Document

1. Introduction

The zen-1 project aims to develop a micro SaaS solution for IAM Access Review Automation. This tool is designed to streamline the process of reviewing user permissions, which is currently done manually using Excel by many companies. The solution targets small to medium-sized businesses (SMBs) using Microsoft Entra ID, Okta, and Google Workspace, offering a lightweight and cost-effective alternative to existing enterprise-focused solutions.

2. System Overview

The zen-1 project will automate the quarterly review of user permissions, providing an efficient and user-friendly platform for managers. The system will include features such as user import, a manager approval dashboard, automatic reminders, and the generation of PDF audit reports. The goal is to simplify the IAM access review process, reduce manual effort, and ensure compliance with security policies.

3. Functional Requirements as Story Points

• As a Manager, I should be able to import users from Microsoft Entra ID, Okta, and Google Workspace.
• As a Manager, I should have access to an approval dashboard to review and approve user permissions.
• As a Manager, I should receive automatic reminders to conduct quarterly access reviews.
• As a Manager, I should be able to generate a PDF audit report of the access review process.

4. User Personas

• Manager: Responsible for reviewing and approving user permissions within the organization. Utilizes the dashboard for efficient management of IAM processes.

5. Core User Flows

1. Manager logs into the system.
2. Manager imports users from Microsoft Entra ID, Okta, or Google Workspace.
3. Manager reviews user permissions on the approval dashboard.
4. System sends automatic reminders for quarterly reviews.
5. Manager approves or adjusts permissions as needed.
6. Manager generates a PDF audit report for compliance records.

6. Visuals Colors and Theme

• primary: #1E90FF (Dodger Blue)
• primary_light: #63B8FF (Light Dodger Blue)
• secondary: #32CD32 (Lime Green)
• accent: #FF4500 (Orange Red)
• highlight: #FFD700 (Gold)
• bg: #F0F8FF (Alice Blue)
• surface: #FFFFFF (White)
• text: #000000 (Black)
• text_muted: #696969 (Dim Gray)
• border: #D3D3D3 (Light Gray)

7. Signature Design Concept

Interactive Dashboard Experience

The zen-1 landing page will feature an interactive dashboard experience that visually represents the IAM review process. The dashboard will have dynamic elements that respond to user interactions, such as hovering and clicking. The central feature will be a live, animated flowchart that illustrates the steps of the access review process. Users can click on different stages to see detailed information and statistics. The dashboard will use motion/react for smooth transitions and animations, creating an engaging and intuitive user experience.

LANDING HERO MOTION BRIEF

The landing hero will depict a transformation of user data into a secure, compliant state. The animation will start with raw data inputs (represented as icons of user profiles) flowing into the system. As the data moves through the process, it will transform into a secure lock icon, symbolizing compliance and security. This animation will loop continuously, with interactive elements allowing users to explore each stage of the transformation. The animation will be built using motion/react for seamless integration and responsiveness.

8. Interaction Model & Motion Direction

• Interaction Model: Animated
• The landing page will feature moderate scroll-triggered reveals and hover transitions. Interactive elements will have spring physics for a polished feel. This model is ideal for showcasing the feature-rich capabilities of the zen-1 platform.

9. Non-Functional Requirements

• The system must be highly available and handle concurrent user access without performance degradation.
• The platform should ensure data security and privacy, complying with relevant regulations.
• The user interface must be intuitive and accessible, adhering to WCAG 2.1 standards.

10. Tech Stack

• Frontend: React for Web
• Backend: Python, FastAPI
• Database: MySQL or MariaDB, with alembic for migrations
• AI Models: Not applicable
• AI Tools: Not applicable
• Local Orchestration: Docker, docker-compose
• Server-side Orchestration: Kubernetes

11. Assumptions and Constraints

• The system will primarily target SMBs using Microsoft Entra ID, Okta, and Google Workspace.
• The pricing model is set at $99/month, aiming for 60 customers to achieve ~$6,000 MRR.
• The solution must be lightweight and cost-effective compared to enterprise-focused competitors.

12. Glossary

• IAM: Identity and Access Management
• SMB: Small to Medium-sized Business
• MRR: Monthly Recurring Revenue
• WCAG: Web Content Accessibility Guidelines