Matrix access review

Patent metadata

Field	Value
Publication number	US-9973904-B2
Application number	US-201414486066-A
Country	US
Kind code	B2
Filing date	Sep 15, 2014
Priority date	Sep 15, 2014
Publication date	May 15, 2018
Grant date	May 15, 2018

Abstract

A computing platform may receive, from a plurality of computing systems, data identifying permissions of a plurality of users to access one or more resources of the plurality of computing systems. The computing platform may identify, from amongst the plurality of users, a plurality of groups of users. The computing platform may identify, from amongst the permissions, a plurality of sets of permissions. Each set of permissions may include permissions shared by each user of a group of users of the plurality of groups of users. The computing platform may generate a graphical depiction of the plurality of groups of users and the plurality of sets of permissions. The graphical depiction may graphically depict, for each group of the plurality of groups, one or more sets of permissions, of the plurality of sets of permissions, shared by each user of the group.

First claim

What is claimed is:

1. A method, comprising:
at a computing platform comprising at least one processor, a communication interface, and a memory:
receiving, via the communication interface and from a plurality of computing systems, data identifying permissions of a plurality of users to access one or more resources of the plurality of computing systems, wherein the plurality of users are associated with an organization;
identifying, by the at least one processor and from amongst the plurality of users, a plurality of groups of users;
identifying, by the at least one processor and from amongst the permissions, a plurality of sets of permissions, each set of permissions of the plurality of sets of permissions comprising permissions shared by each user of a group of users of the plurality of groups of users;
identifying, by the at least one processor, a plurality of managers within the organization;
identifying, by the at least one processor and for each group of the plurality of groups, a manager of the group, the manager of the group being different from one or more other users in the group; and
generating, by the at least one processor, a matrix access review report associated with the plurality of groups of users and the plurality of sets of permissions, the matrix access review report graphically depicting, for each group of the plurality of groups, one or more sets of permissions, of the plurality of sets of permissions, shared by each user of the group, wherein, for each group the plurality of groups, the matrix access review report comprises a graphical element corresponding to the manager of the group, wherein the graphical element corresponding to the manager of the group:
identifies the manager of the group;
identifies each user of the group; and
for each set of permissions of the one or more sets of permissions, graphically depicts that permissions in the set of permissions are shared by each user of the group,

wherein generating the matrix access review report comprises:
generating, by the at least one processor, a first portion of the matrix access review report for a first group of the plurality of groups, the first portion of the matrix access review report for the first group: identifying a manager of the first group, identifying each user of the first group, and graphically depicting one or more sets of permissions, of the plurality of sets of permissions, shared by each user of the first group;
identifying, by the at least one processor, a user device associated with the manager of the first group;
communicating, via the communication interface and to the user device associated with the manager of the first group, the first portion of the matrix access review report for the first group;
generating, by the at least one processor, a second portion of the matrix access review report for a second group of the plurality of groups, the second group comprising different users than the first group, the second portion of the matrix access review report for the second group: identifying a manager of the second group, failing to identify the manager of the first group, identifying each user of the second group, failing to identify one or more members of the first group, graphically depicting one or more sets of permissions, of the plurality of sets of permissions, shared by each user of the second group, and failing to graphically depict at least one of the one or more sets of permissions shared by each user of the first group;
identifying, by the at least one processor, a user device associated with the manager of the second group;
communicating, via the communication interface and to the user device associated with the manager of the second group, the second portion of the matrix access review report for the second group;
generating, by the at least one processor, a third portion of the matrix access review report for a third group of the plurality of groups, the third group comprising each user of the first group, each user of the second group, and a plurality of other users of the plurality of users, each user of the plurality of other users being a user that is in neither the first group nor the second group, the third portion of the matrix access review report for the third group: identifying the manager of the first group, identifying the manager of the second group, identifying a manager of the third group, identifying each user of the first group, identifying each user of the second group, identifying each user of the plurality of other users, graphically depicting the one or more sets of permissions shared by each user of the first group, graphically depicting the one or more sets of permissions shared by each user of the second group, and graphically depicting one or more sets of permissions, of the plurality of sets of permissions, shared by each user of the plurality of other users;
identifying, by the at least one processor, a user device associated with the manager of the third group; and
communicating, via the communication interface and to the user device associated with the manager of the third group, the third portion of the matrix access review report for the third group.

2. The method of claim 1 , comprising:
communicating, via the communication interface and to a user device, the matrix access review report.

3. The method of claim 2 , comprising:
receiving, by the user device, the matrix access review report; and
utilizing, by the user device, the matrix access review report received from the computing platform to render the matrix access review report for display.

4. The method of claim 1 , comprising, for each computing system of the plurality of computing systems:
generating, by the at least one processor, a request for data identifying permissions of the plurality of users to access one or more resources of the computing system; and
communicating, via the communication interface and to the computing system, the request for the data identifying the permissions of the plurality of users to access the one or more resources of the computing system.

5. The method of claim 1 , wherein the matrix access review report comprises a first plurality of graphical elements and a second plurality of graphical elements, each graphical element of the first plurality of graphical elements being parallel to each other graphical element of the first plurality of graphical elements, and each graphical element of the first plurality of graphical elements being orthogonal to each graphical element of the second plurality of graphical elements.

6. The method of claim 5 , wherein each graphical element of the first plurality of graphical elements corresponds to a user of the plurality of users, and wherein each graphical element of the second plurality of graphical elements corresponds to a resource of a computing system of the plurality of computing systems and a permission type of the resource.

7. The method of claim 6 , wherein the matrix access review report comprises a plurality of cells, each cell of the plurality of cells corresponding to an intersection of a graphical element of the first plurality of graphical elements and a graphical element of the second plurality of graphical elements.

8. The method of claim 7 , wherein each cell of the plurality of cells:
corresponds to a user of the plurality of users, a resource of a computing system of the plurality of computing systems, and a permission type of the resource; and
graphically depicts whether the data identifying the permissions of the plurality of users indicates that the user has the permission type of the resource.

9. The method of claim 8 , wherein the plurality of cells comprises a plurality of sets of adjoining cells, each set of adjo

Assignees

• Bank Of America

Inventors

• Baikalov Igor A
• Moloian Armen
• Pritchard David

Classifications

• H04W4/08 Primary

  User group management · CPC title