02 / The Work
ARIA
Assets · Tickets · Password Vault · Budget · Entra SSO · Phased Rollout, Live
Built At Antz →The Problem
IT used to live on HR's plate, on top of everything HR already carries. As it piled up, I volunteered to take it over. What existed was a spreadsheet, no clean support pipeline, and no real audit trail — a gap with consequences for a company pursuing ISO 27001. So I built the tool that should have already existed.
The Decisions
Kill The Spreadsheet
Replaced an Excel-based IT workflow with a tracked, auditable system — assets, custody history, service records, tickets, and budget in one place, each change attributed to someone.
Least Privilege By Default
Three roles. A regular user sees only their own assets — no custody history, no passwords, no invoices. Identity comes from Entra sign-on; the app decides what you're allowed to touch.
Secrets Encrypted, Revealed On Demand
Per-asset credentials live in an encrypted vault, shown only when someone actually needs them — never sitting in plain text in a sheet.
Bends Without A Redeploy
Asset types are admin-managed, so a new kind of hardware or a new SaaS seat to track is a form entry, not an engineering ticket.
How It Works
- 01Sign in with your work account. What you can see and touch is decided by your role — admin, HR, or a regular user — not by who trusts you.
- 02Every laptop, monitor, router, display: who holds it, since when, what's been repaired, what it cost. Tracked, not remembered.
- 03Credentials live in an encrypted vault and are revealed only when someone actually needs them — never sitting in plain text in a shared sheet.
- 04New kind of hardware to track, or a SaaS seat to log? Add it in the app. No engineering ticket, no redeploy.
High-Level Design
The Outcome
Live, in phased use, and the reason I was named secondary ISO 27001 contact with actual authority to reject improperly signed-off requests. The tool became the job.
3 roles · 15 data models · 16 API resources
Named It Myself. Still Not Sorry.