Reconciliation of access rights in a computing system
First Claim
Patent Images
1. A system for reconciling access rights of a computing system comprising:
- at least one processor; and
memory storing instructions that, when executed by the at least one processor, cause the system to generate a reconciliation report that indicates at least one access right of a computing system should either be provisioned or revoked wherein the reconciliation report is generated by performing one or more reconciliation tasks using access right information that corresponds to one or more access rights of a computing system andwherein each of the one or more reconciliation tasks is associated with instructions stored at the memory that, when executed by the at least one processor, cause the system to;
determine, from the access right information, a plurality of users that are each associated with an access right of the one or more access rights,obtain attribute information corresponding to one or more attributes of the plurality of users,select one of the users of the plurality of users, andgenerate the reconciliation report based on a comparison between a first portion of the attribute information that is associated with the selected user and a second portion of the attribute information that is respectively associated with a plurality of other users of the plurality of users; and
wherein the one or more reconciliation tasks include a first reconciliation task associated with instructions stored at the memory that, when executed by the at least one processor, further cause the system to;
determine, from the attribute information and for each of the plurality of users, an attribute of the user wherein the attribute comprises one of a role, a job code, a job title, a geographic location, a line-of-business, or a business division,determine a percentage of the plurality of other users having the same attribute as the selected user, andconfigure the reconciliation report to indicate that the selected user is an outlier responsive to determining that the percentage is less than a predetermined percentage threshold.
1 Assignment
0 Petitions
Accused Products
Abstract
Systems and methods are provide for reconciling access rights of a computing system are described. Access right information that respectively corresponds to access rights of a computing system may be obtained and evaluated. Reconciliation tasks may be performed using the access right information, and a reconciliation report may be generated during performance of at least one of the reconciliation tasks. The reconciliation report may indicate that one or more of the access rights should either be provisioned or revoked at the computing system.
-
Citations
17 Claims
-
1. A system for reconciling access rights of a computing system comprising:
-
at least one processor; and memory storing instructions that, when executed by the at least one processor, cause the system to generate a reconciliation report that indicates at least one access right of a computing system should either be provisioned or revoked wherein the reconciliation report is generated by performing one or more reconciliation tasks using access right information that corresponds to one or more access rights of a computing system and wherein each of the one or more reconciliation tasks is associated with instructions stored at the memory that, when executed by the at least one processor, cause the system to; determine, from the access right information, a plurality of users that are each associated with an access right of the one or more access rights, obtain attribute information corresponding to one or more attributes of the plurality of users, select one of the users of the plurality of users, and generate the reconciliation report based on a comparison between a first portion of the attribute information that is associated with the selected user and a second portion of the attribute information that is respectively associated with a plurality of other users of the plurality of users; and wherein the one or more reconciliation tasks include a first reconciliation task associated with instructions stored at the memory that, when executed by the at least one processor, further cause the system to; determine, from the attribute information and for each of the plurality of users, an attribute of the user wherein the attribute comprises one of a role, a job code, a job title, a geographic location, a line-of-business, or a business division, determine a percentage of the plurality of other users having the same attribute as the selected user, and configure the reconciliation report to indicate that the selected user is an outlier responsive to determining that the percentage is less than a predetermined percentage threshold. - View Dependent Claims (2, 3, 4, 5, 6)
-
-
7. A computer-implemented method for reconciling access rights of a computing system comprising:
-
generating, by a computing device, a reconciliation report that indicates at least one access right of a computing system should either be provisioned or revoked wherein the reconciliation report is generated by performing one or more reconciliation tasks using access right information that corresponds to one or more access rights of a computing system and wherein each of the one or more reconciliation tasks comprises; determining, by the computing device from the access right information, a plurality of users that are each associated with an access right of the one or more access rights, obtaining, by the computing device, attribute information corresponding to one or more attributes of the plurality of users, selecting, by the computing device, one of the users of the plurality of users, and generating, by the computing device, the reconciliation report based on a comparison between a first portion of the attribute information that is associated with the selected user and a second portion of the attribute information that is respectively associated with plurality of other of the plurality of users; and wherein the one or more reconciliation tasks include a first reconciliation task further comprising; determining, by the computing device from the attribute information and for each of the plurality of users, an attribute of the user wherein the attribute comprises one of a role, a job code, a job title, a geographic location, a line-of-business, or a business division, determining, by the computing device, a percentage of the plurality of other users having the same attribute as the user, and configuring, by the computing device, the reconciliation report to indicate that the selected user is an outlier responsive to determining that the percentage is less than a predetermined percentage threshold. - View Dependent Claims (8, 9, 10, 11, 12)
-
-
13. Non-transitory computer-readable media comprising instructions that, when executed by a processor of a computing device, cause the computing device to perform steps for reconciling access rights of a computing system, the steps comprising:
-
generating a reconciliation report that indicates at least one access right of a computing system should either be provisioned or revoked wherein the reconciliation report is generated by performing one or more reconciliation tasks using access right information that corresponds to one or more access rights of a computing system and wherein each of the one or more reconciliation tasks comprises; determining, from the access right information, a plurality of users that ate each associated with an access right of the one or more access rights, obtaining attribute information corresponding to one or more attributes of the plurality of users, selecting one of the users of the plurality of users, and generating the reconciliation report based on a comparison between a first portion of the attribute information that is associated with the selected user and a second portion of the attribute information that is respectively associated with plurality of other users of the plurality of users; and wherein the one or more reconciliation tasks include a first reconciliation task further comprising; determining, from the attribute information and for each of the plurality of users, an attribute of the user wherein the attribute comprises one of a role, a job code, a job title, a geographic location, a line-of-business, or a business division, determining a percentage of the plurality of other users having the same attribute as the selected user, and configuring the reconciliation report to indicate that the selected user is an outlier responsive to determining that the percentage is less than a predetermined percentage threshold. - View Dependent Claims (14, 15, 16, 17)
-
Specification