Back to results
US 11,537,603 B2Granted
System and method for SQL server resources and permissions analysis in identity management systems
AssigneeSailpoint Technologies Israel Ltd.
InventorsItay Maichel, Anatoly Gutnik, Shlomi Wexler
Life of this patent
Estimating the term…
Abstract
Embodiments as disclosed allow identity management with respect to SQL database by discovering substantially database objects and their entitlements and associating them with corresponding identities within the identity management system, thus providing insights into such SQL server entitlements and their associated identities, even across multiple SQL servers within an enterprise environment.
Claims21
An identity management system, comprising:
- a processor;
- a non-transitory, computer-readable storage medium, including computer instructions for:
- obtaining identity management data associated with a plurality of source systems in a distributed enterprise computing environment, the obtaining identity management data further comprising:
- initiating a crawl process of the plurality of source systems to obtain database objects of SQL servers of the plurality of source systems, and
- initiating a permission collection service to fetch permissions of the obtained database objects from respective SQL servers of the plurality of source systems;
- the identity management data comprising data on a set of identity management artifacts utilized in identity management in the distributed enterprise computing environment, including a set of identities, SQL database objects and entitlements associated with the SQL database objects, wherein:
- the plurality of source systems include an authoritative source system and the identity management data comprises identity data on a set of identities obtained from the authoritative source system, wherein each of the set of identities is associated with a first identifier for that identity obtained from the authoritative source system,
- the plurality of source systems include at least one SQL server and the identity management data comprises SQL object data on SQL database objects of the SQL server and entitlement data on a set of entitlements, wherein each of the set of entitlements is associated with a second identifier and an associated SQL database object of the SQL database objects;
- receiving a criteria associated with a first identity of the set of identities;
- determining one or more entitlements to SQL database objects based on the second identifier associated with each of the set of entitlements and the first identifier for the first identity, wherein the one or more entitlements are associated with the first identity and are determined by correlating the second identifier associated with one or more entitlements with the first identifier for the first identity;
- and
- presenting the one or more entitlements and associated SQL database objects in association with the first identity.
9 more elements
A method, comprising:
- obtaining identity management data associated with a plurality of source systems in a distributed enterprise computing environment, the obtaining identity management data further comprising:
- initiating a crawl process of the plurality of source systems to obtain database objects of SQL servers of the plurality of source systems, and
- initiating a permission collection service to fetch permissions of the obtained database objects from respective SQL servers of the plurality of source systems;
- the identity management data comprising data on a set of identity management artifacts utilized in identity management in the distributed enterprise computing environment, including a set of identities, SQL database objects and entitlements associated with the SQL database objects, wherein:
- the plurality of source systems include an authoritative source system and the identity management data comprises identity data on a set of identities obtained from the authoritative source system, wherein each of the set of identities is associated with a first identifier for that identity obtained from the authoritative source system,
- the plurality of source systems include at least one SQL server and the identity management data comprises SQL object data on SQL database objects of the SQL server and entitlement data on a set of entitlements, wherein each of the set of entitlements is associated with a second identifier and an associated SQL database object of the SQL database objects;
- receiving a criteria associated with a first identity of the set of identities;
- determining one or more entitlements to SQL database objects based on the second identifier associated with each of the set of entitlements and the first identifier for the first identity, wherein the one or more entitlements are associated with the first identity and are determined by correlating the second identifier associated with one or more entitlements with the first identifier for the first identity;
- and
- presenting the one or more entitlements and associated SQL database objects in association with the first identity.
7 more elements
A non-transitory computer readable medium, comprising instructions for:
- obtaining identity management data associated with a plurality of source systems in a distributed enterprise computing environment, the obtaining identity management data further comprising:
- initiating a crawl process of the plurality of source systems to obtain database objects of SQL servers of the plurality of source systems, and
- initiating a permission collection service to fetch permissions of the obtained database objects from respective SQL servers of the plurality of source systems;
- the identity management data comprising data on a set of identity management artifacts utilized in identity management in the distributed enterprise computing environment, including a set of identities, SQL database objects and entitlements associated with the SQL database objects, wherein:
- the plurality of source systems include an authoritative source system and the identity management data comprises identity data on a set of identities obtained from the authoritative source system, wherein each of the set of identities is associated with a first identifier for that identity obtained from the authoritative source system,
- the plurality of source systems include at least one SQL server and the identity management data comprises SQL object data on SQL database objects of the SQL server and entitlement data on a set of entitlements, wherein each of the set of entitlements is associated with a second identifier and an associated SQL database object of the SQL database objects;
- receiving a criteria associated with a first identity of the set of identities;
- determining one or more entitlements to SQL database objects based on the second identifier associated with each of the set of entitlements and the first identifier for the first identity, wherein the one or more entitlements are associated with the first identity and are determined by correlating the second identifier associated with one or more entitlements with the first identifier for the first identity;
- and
- presenting the one or more entitlements and associated SQL database objects in association with the first identity.
7 more elements
Dependencies are inferred from the claim text.