Setting task permissions for software services in distributed computing environments

Patent metadata

Field	Value
Publication number	US-11900158-B2
Application number	US-202117167806-A
Country	US
Kind code	B2
Filing date	Feb 4, 2021
Priority date	Feb 4, 2021
Publication date	Feb 13, 2024
Grant date	Feb 13, 2024

Abstract

Task permissions for software services can be set in a distributed computing environment according to some examples described herein. In one example, a system can determine software services that are included in software products deployable to a user account of a distributed computing environment. The system can determine task permissions to be set in the user account for allowing the software services to execute tasks in the distributed computing environment. The system can generate a list of task permissions by consolidating the task permissions based on predefined rules. The system can then transmit an output indicating the list of task permissions for causing the user account to be configured based on the list of task permissions, to permit the software services to execute the tasks in the distributed computing environment.

First claim

The invention claimed is:

1. A system comprising:
a processor; and
a memory including instructions that are executable by the processor for causing the processor to:
determine software services that are included in software products deployable to a user account of a distributed computing environment, wherein the software services are executable software programs that support the software products;
determine task permissions to be set in the user account for allowing the software services to execute tasks in the distributed computing environment, wherein the task permissions include a first set of task permissions associated with implementing a particular software service as part of a first software product among the software products, and wherein the task permissions include a second set of task permissions associated with implementing the particular software service as part of a second software product among the software products;
generate a list of task permissions by consolidating the task permissions based on predefined rules, wherein generating the list of task permissions involves:
generating a consolidated set of task permissions for the particular software service by merging the first set of task permissions with the second set of task permissions;
incorporating the consolidated set of task permissions into the list of task permissions; and

transmit an output indicating the list of task permissions for causing the user account to be configured in accordance with the list of task permissions, to permit the software services to execute the tasks in the distributed computing environment.

2. The system of claim 1 , wherein the memory further includes instructions that are executable by the processor for causing the processor to:
receive a selection of the software products from a user;
based on receiving the selection from the user, determine the software services that are included in the software products; and
based on determining the software services that are included in the software products, determine the task permissions by using a database or documentation associated with the software services.

3. The system of claim 1 , wherein the memory further includes instructions that are executable by the processor for causing the processor to generate the consolidated set of task permissions by:
determining that the second set of task permissions includes a duplicate task permission that is also present in the first set of task permissions; and
generating the consolidated set of task permissions to exclude the duplicate task permission.

4. The system of claim 1 , wherein the memory further includes instructions that are executable by the processor for causing the processor to generate the consolidated set of task permissions by:
determining that the first set of task permissions includes a first task permission;
determining that the second set of task permissions includes a second task permission that is higher in a permission hierarchy than the first task permission and overrides the first task permission; and
generating the consolidated set of task permissions to include the second task permission and exclude the first task permission.

5. The system of claim 1 , wherein the memory further includes instructions that are executable by the processor for causing the processor to, subsequent to transmitting the output:
determine whether a particular task permission in the list of task permissions is set in the user account for a particular software service of the software services; and
in response to determining that the particular task permission is not set for the particular software service in the user account:
output a notification indicating that the particular task permission is not set for the particular software service in the user account; and
prevent the particular software service from being deployed to the user account.

6. The system of claim 1 , wherein the memory further includes instructions that are executable by the processor for causing the processor to:
deploy the software services to the user account; and
subsequent to deploying the software services to the user account:
determine that an update is available for a particular software service of the software services;
based on the update, determine a change to a task permission associated with the particular software service; and
output a notification indicating the change to the task permission prior to the update being deployed to the user account, for causing the task permission to be adjusted in the user account.

7. The system of claim 1 , wherein the memory further includes instructions that are executable by the processor for causing the processor to:
generate a script based on the list of task permissions, the script being executable for causing requests to be transmitted to an application programming interface (API) of the distributed computing environment for automatically configuring the user account in accordance with the list of task permissions.

8. The system of claim 1 , wherein the software products include managed software products configured to be managed on the user account by a vendor.

9. The system of claim 1 , wherein each of the software products includes a respective set of software services, wherein each of the software services is configured to execute one or more of the tasks, and wherein each of the task permissions is for enabling or disabling execution of one or more of the tasks.

10. A method comprising:
determining, by a processor, software services that are included in software products deployable to a user account of a distributed computing environment, wherein the software services are executable software programs that support the software products;
determining, by the processor, task permissions to be set in the user account for allowing the software services to execute tasks in the distributed computing environment, wherein the task permissions include a first set of task permissions associated with implementing a particular software service as part of a first software product among the software products, and wherein the task permissions include a second set of task permissions associated with implementing the particular software service as part of a second software product among the software products;
generating, by the processor, a list of task permissions by consolidating the task permissions based on predefined rules, wherein generating the list of task permissions involves:
generating a consolidated set of task permissions for the particular software service by merging the first set of task permissions with the second set of task permissions;
incorporating the consolidated set of task permissions into the list of task permissions; and

transmitting, by the processor, an output indicating the list of task permissions for causing the user account to be configured in accordance with the list of task permissions, to permit the software services to execute the tasks in the distributed computing environment.

11. The method of claim 10 , further comprising:
receiving a selection of the software products from a user;
based on receiving the selection from the user, determining the software services that are included in the software products; and
based on determining the software services that are included in the software products, determining the task permissions by using a database or documentation associated with the software services.

12. The method of claim 10 , further comprising generating the consolidated set of task permissions by:
determining that the second set of task permissions includes a duplicate task permission

Assignees

• Red Hat Inc

Inventors

• Ryan Michael Gerard
• Gallagher Brian

Classifications

• G06F9/4881 Primary

  Scheduling strategies for dispatcher, e.g. round robin, multi-level priority queues · CPC title

• G06F8/70

  Software maintenance or management · CPC title

• G06F9/5038

  considering the execution order of a plurality of tasks, e.g. taking priority or time dependency constraints into consideration (scheduling strategies G06F9/4881 and subgroups) · CPC title

• G06F21/31

  User authentication · CPC title

• G06F2209/482

  Application · CPC title