Systems and methods for access control governance recommendation

A computer-implemented method for generating an access profile for a given user in a group that includes a plurality of users with respect to access of a plurality of resources, the method comprising:

• generating, by a computing device, a plurality of demographic similarity scores in a demographic similarity matrix, wherein each demographic similarity score measures a degree of similarity between a pair of the users in the group with respect to a demographic metric in a plurality of demographic metrics;
• generating, by the computing device, a plurality of access similarity scores in an access similarity matrix, wherein each access similarity score measures a degree of similarity between a pair of the users in the group with respect to a plurality of current access privileges to respective ones of the plurality of resources, wherein generating the plurality of access similarity scores comprises generating a subject-access matrix that includes a plurality of access vectors corresponding to the plurality of users, each access vector indicating the current access privileges of the corresponding user;
• calculating, by the computing device, a plurality of group similarity scores in a group similarity matrix based on a weighted average of the demographic similarity scores and the access similarity scores, wherein each group similarity score measures a degree of similarity between a pair of the users in the group with respect to both the demographic metrics and the current access privileges;
• performing, by the computing device, outlier detection on the plurality of group similarity scores to detect at least one user who is an outlier for accessing one or more of the resources;
• reducing, by the computing device based on the outlier detection, the current access privilege of the outlier user corresponding to the one or more resources, thereby accounting for legacy access of the outlier user to the one or more resources, wherein the reducing comprises numerically updating the access vector in the subject-access matrix that corresponds to the outlier user;
• creating, by the computing device, the access profile for the given user based on the group similarity matrix and the updated subject-access matrix, the access profile indicating access recommendations for the given user in relation to the resources;
• and
• granting, by the computing device, the given user access to the plurality of resources based on the access recommendations in the access profile.