Client IAM Policy Editor

I’m planning to roll out a small-footprint Identity and Access Management editor that my clients can use to create, view, and adjust their own policies without touching the underlying infrastructure. At its core the tool should let an administrator sign in, browse existing users and groups, and then add, change, or revoke permissions through an intuitive interface.

Although I have not finalised the target environment yet, I want the architecture to stay flexible enough to plug into common cloud stacks such as AWS, Azure, or Google Cloud later on. If you already have presets or libraries that handle role definitions, access-control statements, or audit logs for any of those platforms, feel free to mention them in your approach.

The deliverable I’m looking for is a working web-based editor—clean UX, clear separation between data and presentation, and secure API endpoints ready for integration into a broader admin portal. Please outline:
• Your preferred tech stack (front-end, back-end, database or policy store)
• How you will keep policy updates atomic and auditable
• Any prior work you’ve done with IAM schemas or permission editors

I’ll review prototypes quickly, so short iterations or milestone demos are welcome.