Back to results
US 11,057,491 B1Granted
Remote execution using a global identity
AssigneeSnowflake Inc.
InventorsKhalid Zaman Bijon, Damien Carru, Christopher Peter Child, Eric Karlson, Zheng Mi
Life of this patent
Estimating the term…
Abstract
Embodiments of the present disclosure may provide a streamlined process for performing operations, such as data sharing and data replication, using multiple accounts. A global identity (also referred to as an organization user) may be employed, where the global identity may have access to multiple accounts across the same or different deployments. The global identity may switch between accounts from its login session and perform various tasks in the context of different accounts without undergoing further authentication.
Claims27
A method comprising:
- receiving, by one or more processors, login information for a global identity;
- based on the login information, authenticating the global identity by creating a one-way trust relationship within an organization;
- establishing a login session providing access to a plurality of accounts associated with the organization based on the one-way relationship;
- receiving a command to execute an operation;
- determining that the command involves performing a plurality of tasks using the plurality of accounts;
- from the login session associated with the global identity, performing a first task of the plurality of tasks using a first account from the plurality of accounts by establishing a first remote session having a first remote session ID with a deployment associated with the first account using a first proxy user associated with the global identity;
- from the login session associated with the global identity, performing a second task of the plurality of tasks using a second account from the plurality of accounts by establishing a second remote session having a second remote session ID with a deployment associated with the second account using a second proxy user associated with the global identity;
- receiving results from the first and second remote sessions;
- and
- combining the results received from the first and second remote sessions to provide a final result for executing the operation.
7 more elements
A non-transitory machine-storage medium embodying instructions that, when executed by a machine, cause the machine to perform operations comprising:
- receiving, by one or more processors, login information for a global identity;
- based on the login information, authenticating the global identity by creating a one-way trust relationship within an organization;
- establishing a login session providing access to a plurality of accounts associated with the organization based on the one-way relationship;
- receiving a command to execute an operation;
- determining that the command involves performing a plurality of tasks using the plurality of accounts;
- from the login session associated with the global identity, performing a first task of the plurality of tasks using a first account from the plurality of accounts by establishing a first remote session having a first remote session ID with a deployment associated with the first account using a first proxy user associated with the global identity;
- from the login session associated with the global identity, performing a second task of the plurality of tasks using a second account from the plurality of accounts by establishing a second remote session having a second remote session ID with a deployment associated with the second account using a second proxy user associated with the global identity;
- receiving results from the first and second remote sessions;
- and
- combining the results received from the first and second remote sessions to provide a final result for executing the operation.
7 more elements
A system comprising:
- one or more processors of a machine;
- and
- a memory storing instructions that, when executed by the one or more processors, cause the machine to perform operations comprising:
- receiving, by one or more processors, login information for a global identity;
- based on the login information, authenticating the global identity by creating a one-way trust relationship within an organization;
- establishing a login session providing access to a plurality of accounts associated with the organization based on the one-way relationship;
- receiving a command to execute an operation;
- determining that the command involves performing a plurality of tasks using the plurality of accounts;
- from the login session associated with the global identity, performing a first task of the plurality of tasks using a first account from the plurality of accounts by establishing a first remote session having a first remote session ID with a deployment associated with the first account using a first proxy user associated with the global identity;
- from the login session associated with the global identity, performing a second task of the plurality of tasks using a second account from the plurality of accounts by establishing a second remote session having a second remote session ID with a deployment associated with the second account using a second proxy user associated with the global identity;
- receiving results from the first and second remote sessions;
- and
- combining the results received from the first and second remote sessions to provide a final result for executing the operation.
10 more elements
Dependencies are inferred from the claim text.