US 10,257,201 B2 · Management of service accounts

Abstract

The present disclosure provides new methods and systems for managing access to service accounts by user accounts. For example, a user account and a service account may be created. The user account may be granted a first permission to access the service account. The first permission may provide a user with a capability to access the service account by at least one of accessing the service account through the user account and directly accessing the service account. A first credential may be issued to the service account. A user account status event regarding a change to the first permission may automatically be detected. It may be determined that the first permission provided access to the service account A second credential may be issued to the service account. The second credential may invalidate the first credential and may prevent the user from directly accessing the service account.

Claims19

Dependent claims

A method for managing service account access comprising:

creating a first user account;
creating a first service account;
granting, to the first user account, a first permission to access the first service account, wherein the first permission provides a first user with a capability to access the first service account by at least one of accessing the first service account through the first user account and directly accessing the first service account;
issuing a first credential to the first service account;
automatically detecting, by an API, a user account status event regarding a change to the first permission by intercepting, by the API, the change to the first permission;
and
responsive to detecting the user account status event, determining that the first permission provided access to the first service account, and issuing a second credential to the first service account,
wherein the second credential invalidates the first credential and prevents the first user from directly accessing the first service account.

5 more elements

A system for managing service account access comprising:

a processor;
a memory;
a first user account;
a first service account, wherein the first user account has a first permission to access the first service account, and wherein the first permission provides a first user with a capability to access the first service account by at least one of accessing the first service account through the first user account and directly accessing the first service account;
an API executing on the processor;
and
a credential generator,
wherein the API:
issues a first credential to the first service account;
automatically detects a user account status event regarding a change to the first permission by intercepting the change to the first permission;
responsive to detecting the user account status event, determines that the first permission provided access to the first service account, and issue a second credential to the first service account,
wherein the second credential invalidates the first credential and prevents the first user from directly accessing the first service account.

9 more elements

Dependencies are inferred from the claim text.

Management of service accounts

Life of this patent

Management of service accounts

Life of this patent

Abstract

Claims19