Delegating administration rights using application containers

Patent metadata

Field	Value
Publication number	US-2016294881-A1
Application number	US-201615185340-A
Country	US
Kind code	A1
Filing date	Jun 17, 2016
Priority date	Jul 3, 2012
Publication date	Oct 6, 2016
Grant date	—

Abstract

A computer implemented method for delegating administration duties using application containers may include associating, by a database system, a custom object to a delegated administrator; associating, by the database system, an application container with a custom object; and enabling, by the database system, the delegated administrator to manage the custom object based on permissions included in the application container, wherein the application container includes a subset of permission included in an application permission.

First claim

What is claimed is:

1 . A method comprising:
associating, by a database system, a custom object to a delegated administrator; associating, by the database system, an application container with the custom object; and enabling, by the database system, the delegated administrator to manage the custom object based on permissions included in the application container.

2 . The method of claim 1 , further comprising enabling, by the database system, an administrator to define one or more application containers based on permissions included in an application permission.

3 . The method of claim 2 , wherein a first customized application container is associated with a first custom object and a second custom object.

4 . The method of claim 2 , wherein a first customized application container is associated with a first custom object and a second customize application container is associated with a second custom object.

5 . The method of claim 2 , further comprising creating, by the database system, a delegated administration group, information about the delegated administration group received by the server computing system from the administrator, wherein the delegated administrator is associated with the delegated administration group.

6 . The method of claim 5 , wherein the delegated administrator is a member of at least two different delegated administration groups.

7 . The method of claim 5 , further comprising associating, by the database system, the delegated administrator with a user role in an organization, information about the role received by the database system from the administrator, the user role identifying users and subordinate of the users to be managed by the delegated administrator.

8 . The method of claim 7 , further comprising associating, by the database system, the delegated administrator with a profile, information about the profile received by the database system from the administrator, the profile is assignable by the delegated administrator to one or more users managed by the delegated administrator.

9 . A computer program product comprising computer-readable program code to be executed by one or more processors when retrieved from a non-transitory computer-readable medium, the program code including instructions to:
create, by a database system, a delegated administrator, information about the delegated administrator received by the server computing system from an administrator; associate, by the database system, a custom object to the delegated administrator, information about the custom object received by the server computing system from the administrator; associate, by the server computing system, a customize application container with the custom object, information about the customize application container received from the administrator; and enable, by the server computing system, the delegated administrator to manage the custom object based on permissions included in the customize application container.

10 . The computer program product of claim 9 , further comprising enabling, by the database system, the administrator to define one or more application containers based on permissions included in a application permission.

11 . The computer program product of claim 10 , wherein a first application container is associated with a first custom object and a second custom object.

12 . The computer program product of claim 10 , wherein a first application container is associated with a first custom object and a second application container is associated with a second custom object.

13 . The computer program product of claim 10 , further comprising creating, by the database system, a delegated administration group, information about the delegated administration group received by the database system from the administrator, wherein the delegated administrator is associated with the delegated administration group.

14 . The computer program product of claim 13 , wherein the delegated administrator is a member of at least two different delegated administration groups.

15 . The computer program product of claim 13 , further comprising associating, by the database system, the delegated administrator with a user role in an organization, information about the role received by the server computing system from the administrator, the user role identifying users and subordinate of the users to be managed by the delegated administrator.

16 . The computer program product of claim 15 , further comprising associating, by the database system, the delegated administrator with a profile, information about the profile received by the database system from the administrator, the profile is assignable by the delegated administrator to one or more users managed by the delegated administrator.

17 . An apparatus comprising:
one or more processors; and a non-transitory computer readable medium storing a plurality of instructions, which when executed, cause the one or more processors to: create, by a database system, a delegated administrator, information about the delegated administrator received by the server computing system from an administrator; associate, by the database system, a custom object to the delegated administrator, information about the custom object received by the server computing system from the administrator; associate, by the database system, a customize application container with the custom object, information about the customize application container received from the administrator; and enable, by the database system, the delegated administrator to manage the custom object based on permissions included in the customize application container.

18 . The apparatus of claim 17 , further comprising enabling, by the database system, the administrator to define one or more application containers based on permissions included in a application permission.

19 . The apparatus of claim 18 , wherein a first application container is associated with a first custom object and a second custom object.

20 . The apparatus of claim 18 , wherein a first application container is associated with a first custom object and a second application container is associated with a second custom object.

Assignees

• Salesforce Com Inc

Inventors

• Hua Jimmy
• Wong Belinda
• Chang Aris
• Dubey Anjesh
• Bhadouria Sukrutha Raman
• Pareek Bharath Kumar

Classifications

• H04L63/20 Primary

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title

• H04L63/10

  for controlling access to devices or network resources · CPC title

• H04L63/102 Primary

  Entity profiles · CPC title

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title