Managing users of cloud services with management tool

• US 10,728,107 B2
• Filed: 06/30/2016
• Issued: 07/28/2020
• Est. Priority Date: 06/30/2015
• Status: Active Grant

• Current Assignee: Skykick
• Original Assignee: SkyKick, Inc.
• Inventors: Dennis, John, Handler, Doug, Richman, Evan, Schwartz, Todd, Younge, Bradley, Hintzke, Matthew Steven, Caldwell, Corey Brent, Davis, Robert William
• Primary Examiner(s): Salad, Abdullahi E
• Application Number:
  US15/199,872
• Publication Number:
  US 20170006131A1
• Time in Patent Office: 1,489 Days
• Field of Search: 709226
• CPC Class Codes: G06F 16/2365 Ensuring data consistency and integrity
• CPC Class Codes: H04L 41/0803 Configuration setting
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 67/51 Discovery or management thereof, e.g. service location protocol [SLP] or web services

Abstract

Embodiments can provide centralized management of cloud service providers for one or more customers, including adding, changing or deleting end user data for accessing various cloud services from a common user interface. The common user interface can facilitate configuring user settings for a particular user for different cloud services through a user profile for the particular user. The user profile can be constructed from a corresponding user record stored in a databased. The user record can be updated by obtaining user information from the different cloud services. The obtained user information can be matched to the user record by using one or more criteria. In some embodiments, different criteria can be used for matching information from different cloud services to the user record.

Claims

1. A method of managing a plurality of users of an entity for using cloud services, the plurality of users including a first user of the entity, the cloud services including a first cloud service and a second cloud service, the method comprising performing by a computer system:

obtaining, from each of the cloud services, respective user information, the obtained user information including first user information from the first cloud service and second user information from the second cloud service;

matching the first user information from the first cloud service to the user information from the first cloud service to the plurality of users based on first criteria, and matching the second user information from the second cloud service to the plurality of users of the entity based on second criteria;

updating user records associated with the plurality of users of the entity using the matched user information from the first cloud service and the second cloud service, wherein the updating of the user records comprises;

updating a first field in a user record for the first user of the entity using user information from the first cloud service that is matched to the first user, and

updating a second field in the user record for the first user of the entity using user information from the second cloud service that is matched to the first user;

constructing user profiles for the plurality of users using the user records, wherein the user profiles includes a first user profile for a first user comprising a first attribute corresponding to the first field and a second attribute corresponding to the second field;

providing a graphical user interface to enable management of the plurality of users for the cloud services through the user profiles, the graphical user interface enabling managing the first cloud service and the second cloud service for the first user through the first user profile;

receiving, from the graphical user interface a request, a modification of the first attribute or the second attribute in the first user profile;

if a change in the received modification is for the first attribute, transmitting the change to the first attribute to the first cloud service; and

if the change in the received modification is for the second attribute, transmitting the change to the second attribute to the second cloud service.

2. The method of claim 1, wherein the first criteria is distinct and different from the second criteria.

3. The method of claim 1, wherein the first criteria specifies the first user information from the first cloud service is matched to a specific one of the plurality of users based on an email address in the first user information from the first cloud service matching an email address associated with the specific one of the plurality of users, and wherein the second criteria specifies a user record in the second user information from the second cloud service is matched to the specific one of the plurality of users based on a user name in the second user information from the second cloud service matching a user name for the specific one of the plurality of users.

4. The method of claim 1, wherein the first attribute indicates a group the first user of the entity belongs to for the first cloud service, or a license the first user of the entity is granted for using the first cloud service.

5. The method of claim 1, further comprising receiving, from the graphical user interface, a request to modify the first attribute and the second attribute in the first user profile.

6. The method of claim 1, further comprising:

processing the first user information from the first cloud service to identify a first set of user records not associated with any of the plurality of the users; and

generating a user profile based on the identified the first set of user records.

7. The method of claim 6, further comprising processing the second user information from the second cloud service to identify a set of user records not associated with any of the plurality of the users, and wherein the user profile is generated further based on the identified set of user records.

8. The method of claim 1, wherein the matching includes a heuristic or fuzzy matching rule.

9. The method of claim 8, wherein the heuristic or fuzzy matching rule specifies if a threshold number of alphabets in a name obtained from the cloud service matches a user name of the first user or the second user.

10. A system for managing a plurality of users of an entity for using cloud services, the plurality of users including a first user of the entity, the cloud services including a first cloud service and a second cloud service, wherein the system comprises a hardware processor configured by machine-readable instructions to cause the system to perform:

obtaining, from each of the cloud services, respective user information, the obtained user information including first user information from the first cloud service and second user information from the second cloud service;

matching the first user information from the first cloud service to the user information from the first cloud service to the plurality of users based on first criteria, and matching the second user information from the second cloud service to the plurality of users of the entity based on second criteria;

updating user records associated with the plurality of users of the entity using the matched user information from the first cloud service and the second cloud service, wherein the updating of the user records comprises;

updating a first field in a user record for the first user of the entity using user information from the first cloud service that is matched to the first user, and

updating a second field in the user record for the first user of the entity using user information from the second cloud service that is matched to the first user;

constructing user profiles for the plurality of users using the user records, wherein the user profiles includes a first user profile for a first user comprising a first attribute corresponding to the first field and a second attribute corresponding to the second field;

providing a graphical user interface to enable management of the plurality of users for the cloud services through the user profiles, the graphical user interface enabling managing the first cloud service and the second cloud service for the first user through the first user profile;

receiving, from the graphical user interface a request, a modification of the first attribute or the second attribute in the first user profile;

if a change in the received modification is for the first attribute, transmitting the change to the first attribute to the first cloud service; and

if the change in the received modification is for the second attribute, transmitting the change to the second attribute to the second cloud service.

11. The system of claim 10, wherein the first criteria is distinct and different from the second criteria.

12. The system of claim 10, wherein the first criteria specifies the first user information from the first cloud service is matched to a specific one of the plurality of users based on an email address in the first user information from the first cloud service matching an email address associated with the specific one of the plurality of users, and wherein the second criteria specifies a user record in the second user information from the second cloud service is matched to the specific one of the plurality of users based on a user name in the second user information from the second cloud service matching a user name for the specific one of the plurality of users.

13. The system of claim 10, wherein the first attribute indicates a group the first user of the entity belongs to for the first cloud service, or a license the first user of the entity is granted for using the first cloud service.

14. The system of claim 10, wherein the processor is further configured by the machine-readable instructions to cause the system to perform:

receiving, from the graphical user interface, a request to modify the first attribute and the second attribute in the first user profile.

15. The system of claim 10, wherein the processor is further configured by the machine-readable instructions to cause the system to perform:

processing the first user information from the first cloud service to identify a first set of user records not associated with any of the plurality of the users; and

generating a user profile based on the identified the first set of user records.

16. The system of claim 15, wherein the processor is further configured by the machine-readable instructions to cause the system to perform:

processing the second user information from the second cloud service to identify a set of user records not associated with any of the plurality of the users, and wherein the user profile is generated further based on the identified set of user records.

17. A computer program product comprising a non-transitory tangible medium including computer system executable code for a computer system for managing a plurality of users of an entity for using cloud services, the computer system including a processor, a memory and a display for, the plurality of users including a first user of the entity, the cloud services including a first cloud service and a second cloud service, wherein the computer program product comprises code that directs the processor to perform:

obtaining, from each of the cloud services, respective user information, the obtained user information including first user information from the first cloud service and second user information from the second cloud service;

matching the first user information from the first cloud service to the user information from the first cloud service to the plurality of users based on first criteria, and matching the second user information from the second cloud service to the plurality of users of the entity based on second criteria;

updating user records associated with the plurality of users of the entity using the matched user information from the first cloud service and the second cloud service, wherein the updating of the user records comprises;

updating a first field in a user record for the first user of the entity using user information from the first cloud service that is matched to the first user, and

updating a second field in the user record for the first user of the entity using user information from the second cloud service that is matched to the first user;

constructing user profiles for the plurality of users using the user records, wherein the user profiles includes a first user profile for a first user comprising a first attribute corresponding to the first field and a second attribute corresponding to the second field;

providing a graphical user interface to enable management of the plurality of users for the cloud services through the user profiles, the graphical user interface enabling managing the first cloud service and the second cloud service for the first user through the first user profile;

receiving, from the graphical user interface a request, a modification of the first attribute or the second attribute in the first user profile;

if a change in the received modification is for the first attribute, transmitting the change to the first attribute to the first cloud service; and

if the change in the received modification is for the second attribute, transmitting the change to the second attribute to the second cloud service.

18. The computer product of claim 17, wherein the first criteria is distinct and different from the second criteria.

19. The computer product of claim 17, wherein the first criteria specifies the first user information from the first cloud service is matched to a specific one of the plurality of users based on an email address in the first user information from the first cloud service matching an email address associated with the specific one of the plurality of users, and wherein the second criteria specifies a user record in the second user information from the second cloud service is matched to the specific one of the plurality of users based on a user name in the second user information from the second cloud service matching a user name for the specific one of the plurality of users.

20. The computer product of claim 17, wherein the first attribute indicates a group the first user of the entity belongs to for the first cloud service, or a license the first user of the entity is granted for using the first cloud service.

21. The computer product of claim 17, wherein the code directs the processor to further perform:

receiving, from the graphical user interface, a request to modify the first attribute and the second attribute in the first user profile.

22. The system of claim 17, wherein the code directs the processor to further perform:

processing the first user information from the first cloud service to identify a first set of user records not associated with any of the plurality of the users; and

generating a user profile based on the identified the first set of user records.