Product Design / Enterprise Software / Data Visualisation

10 / 12

Zoran

Zoran project

Overview

Zoran is an identity and access management platform for large organisations. Across thousands of employees and hundreds of applications, people collect access as they join, move between teams, and leave. Much of it is never reviewed, and some combinations of permissions should never belong to the same person.

The project designed a way to see and act on that access at scale. Starting from a map of the employee lifecycle, the work produced an overview that scores each entitlement by how confident the organisation can be that it is appropriate, and views for investigating a single entitlement or person.

Mapping the employee lifecycle

The work began by mapping how access changes over an employee's time at a company: joining, requesting new access, certification reviews, and changing departments. Pain points along the map pointed to where a new tool could help. Designs were then reviewed with the team and stakeholders on a large screen beside the map.

Two long employee lifecycle maps pinned to a wooden wall above a desk, each marked with stages, actions, and rows of red pain-point cards
A designer presenting a dark interface on a wall-mounted screen to four colleagues, with lifecycle maps behind themA group of stakeholders watching a designer demonstrate the entitlements dashboard on a large touchscreen

Entitlements overview

The overview plots every entitlement by its average confidence score and the number of employees who hold it. Colour groups entitlements into low, medium, and high confidence, so the riskiest clusters stand out. Filters narrow the view by application, risk, review date, or segregation-of-duty conflicts.

Close-up of a scatter plot with pink, turquoise, and yellow circles, labelled number of employees and average confidence score

Entitlement detail

Selecting an entitlement shows how confidence is spread across the people who hold it, alongside the rule that grants it. A list groups holders by location, level, and department so reviewers can certify or revoke access in batches.

Laptop showing a Total Compensation Report entitlement with a confidence score ring, an employee distribution bar, a bar chart by confidence, and a grouped list with Revoke and Certify Access buttons
Angled close-up of a bar chart of employees by confidence score, with pink, turquoise, and yellow barsSteeply angled close-up of turquoise bars labelled with confidence score ranges

Single view

The single view turns the question around to show everything one person can access. A timeline places each entitlement by confidence, the table flags high-risk access and segregation-of-duty conflicts, and a profile panel gives the context a manager needs to decide.

Laptop showing a single view of one employee, with a bubble timeline of entitlements, a table of access with risk status, and a profile panel
Close-up of a timeline of overlapping circles sized by entitlement, coloured low, medium, and high
Next projectProduct Design

SuperValu