Automatically, dynamically generating augmentation extensions for network feature authorization

A cloud controller on a network, the cloud controller comprising:

• a processor;
• and
• a computer-readable storage medium having stored therein instructions which, when executed by the processor, cause the processor to perform operations comprising:
• detecting, in a cloud-based network, an availability of a new network feature defined by a feature model in a data modeling language;
• automatically requesting, upon detection of the availability of the new network feature, authorization data;
• processing the feature model using the authorization data to create a policy defining rules for the new network feature;
• generating, based on the policy, a set of augmentation statements for one or more data nodes in the feature model of the new network feature;
• augmenting the feature model with the set of augmentation statements to yield an augmented feature model;
• and
• deploying the augmented feature model with the set of augmentation statements to enforce the policy for the new network feature.

A non-transitory computer-readable storage medium having stored therein instructions which, when executed by a processor in a cloud controller associated with a network, cause the processor to perform operations comprising:

• detecting, in a cloud-based network, an availability of a new network feature defined by a feature model in a data modeling language;
• automatically requesting, upon detection of the availability of the new network feature, authorization data;
• processing the feature model using the authorization data to create a policy defining access control rules for the new network feature;
• generating, based on the policy, a set of augmentation statements for one or more data nodes in the feature model of the new network feature;
• augmenting the feature model with the set of augmentation statements to yield an augmented feature model;
• and
• deploying the augmented feature model with the set of augmentation statements to control access to the new network feature.