Hila Akzin
Résumé
All work

ASAPP · 2024

Permissions for a growing AI suite

A scalable access management system that lets ASAPP’s internal teams and customers control permissions across a growing suite of AI products.

Role
Design lead, sole designer
Timeline
July–September 2024
Team
Product and engineering
Scope
Research, user testing, UX and UI

Overview

As ASAPP’s AI product suite grew, access management became inconsistent and hard to navigate. Duplicate, hidden, and irrelevant permissions slowed onboarding and created friction for customers and support teams. I led the redesign into a unified, scalable permissions model, from research and workflow mapping through testing and delivery, working closely with engineering.

The product

Permissions organized around real work

Exploration

Early options tested navigation-style sections and tabs before landing on workflow grouping; a reusable card anatomy kept hierarchy consistent.

Three explorations: sections like the navigation, two tabs, and permissions organized by workflow
From sections and tabs to workflow grouping
Permission card anatomy: collapsed and expanded, card types, states and permission types
Card anatomy and states

Role editor

Permissions grouped by workflow and filtered to the products a customer owns.

Role editor with permission groups collapsed: Admin, GenerativeAgent, Shared permissions, Conversation Explorer
Workflow groups
GenerativeAgent permissions expanded with access, edit and deploy options
Expanded group

Linked permissions

When one permission depends on another, the editor says so instead of hiding it.

Checking GenerativeAgent tooling shows a notice that API integrations access was turned on
Linked-permission notice
Shared permissions shows API integrations required by GenerativeAgent
Required by GenerativeAgent

Group by workflow

Organizing permissions around real tasks matched admins’ mental models and made roles easier to scan.

Show only what you own

Filtering to owned products removed permissions for tools a customer doesn’t use.

Make links visible

Linked and inherited permissions are explained in place, so access is predictable.

Outcome

A foundation that scales

Validated with onboarding teams and customer admins, the redesign made access management clearer and more predictable, and created a framework adopted across the product suite as new products were added.