Permission aggregator

A system, comprising:

• a processor;
• a computer readable memory in circuit communication with the processor;
• a computer readable storage medium in circuit communication with the processor;
• and
• wherein the processor executes program instructions stored on the computer-readable storage medium via the computer readable memory and thereby:
• in response to an event that requires a permission refresh for a permission credential used by each of a plurality of members of an organization to access a service, populates within a plurality of user profile data sets that are cached in a data repository for each of the members an invalidated value and a first timestamp, wherein values of the first timestamp populated within each of the user profile data sets comprise a time of the populating of the invalidated value within each of the user profile data sets;
• selects one of the user profile data sets in response to determining that the selected user profile data set comprises the invalidated value;
• identifies a second timestamp value within the selected user profile data set that comprises a time of creation of the permission credential within the selected user profile data set;
• and
• in response to determining that a time elapsed between the first timestamp and the second timestamp does not exceed a threshold time value, rebuilds the selected user profile data set by including an updated value of the permission credential within the selected user profile data set and setting the second timestamp value to a current time of the rebuild, and stores the rebuilt selected user profile data set within the repository.

A computer program product, comprising:

• a computer readable storage medium having computer readable program code embodied therewith, wherein the computer readable storage medium is not a transitory signal per se, the computer readable program code comprising instructions for execution by a processor that cause the processor to:
• in response to an event that requires a permission refresh for a permission credential used by each of a plurality of members of an organization to access a service, populate within a plurality of user profile data sets that are cached in a data repository for each of the members an invalidated value and a first timestamp, wherein values of the first timestamp populated within each of the user profile data sets comprise a time of the populating of the invalidated value within each of the user profile data sets;
• select one of the user profile data sets in response to determining that the selected user profile data set comprises the invalidated value;
• identify a second timestamp value within the selected user profile data set that comprises a time of creation of the permission credential within the selected user profile data set;
• and
• in response to determining that a time elapsed between the first timestamp and the second timestamp does not exceed a threshold time value, rebuild the selected user profile data set by including an updated value of the permission credential within the selected user profile data set and setting the second timestamp value to a current time of the rebuild, and stores the rebuilt selected user profile data set within the repository.