Syncing data warehouse permissions using single sign-on authentication
AssigneeSigma Computing, Inc.
InventorsDonald Huang, James L. Gale
Life of this patent
Estimating the term…
Abstract
Syncing data warehouse permissions using single sign-on authentication including establishing a link between a first cloud-based data warehouse and a second cloud-based data warehouse, wherein the link facilitates access to data stored in the second cloud-based data warehouse via the first cloud-based data warehouse; receiving, by the first cloud-based data warehouse, a first query referencing first data stored in the second cloud-based data warehouse; accessing, by the first cloud-based data warehouse, from the second cloud-based data warehouse, the first data; and sending a response to the first query based on the accessed first data.
Claims20
A method of syncing data warehouse permissions using single sign-on (SSO) authentication, the method comprising:
- determining a data warehouse user account of a cloud-based data warehouse corresponding to a data analytics user account of a data analytics service, wherein the data analytics user account has one or more permissions in the data analytics service, and wherein the data warehouse user account and the data analytics user account are authenticated to correspond to a same user using a single sign-on (SSO) authentication credential from an SSO authentication provider;
- determining one or more permissions in the cloud-based data warehouse for the data warehouse user account;
- and
- updating the one or more permissions in the data analytics user account to match the one or more permissions in the cloud-based data warehouse for the data warehouse user account in response to determining a permission in the cloud-based data warehouse for the data warehouse user account is more restrictive than a permission in the data analytics user account.
An apparatus for syncing data warehouse permissions using single sign-on (SSO) authentication, the apparatus comprising a computer processor, a computer memory operatively coupled to the computer processor, the computer memory having disposed within it computer program instructions that, when executed by the computer processor, cause the apparatus to carry out steps of:
- determining a data warehouse user account of a cloud-based data warehouse corresponding to a data analytics user account of a data analytics service, wherein the data analytics user account has one or more permissions in the data analytics service, and wherein the data warehouse user account and the data analytics user account are authenticated to correspond to a same user using a single sign-on (SSO) authentication credential from an SSO authentication provider;
- determining one or more permissions in the cloud-based data warehouse for the data warehouse user account;
- and
- updating the one or more permissions in the data analytics user account to match the one or more permissions in the cloud-based data warehouse for the data warehouse user account in response to determining a permission in the cloud-based data warehouse for the data warehouse user account is more restrictive than a permission in the data analytics user account.
A computer program product for syncing data warehouse permissions using single sign-on (SSO) authentication, the computer program product disposed upon a computer readable storage medium, the computer program product comprising computer program instructions that, when executed, cause a computer to carry out steps of:
- determining a data warehouse user account of a cloud-based data warehouse corresponding to a data analytics user account of a data analytics service, wherein the data analytics user account has one or more permissions in the data analytics service, and wherein the data warehouse user account and the data analytics user account are authenticated to correspond to a same user using a single sign-on (SSO) authentication credential from an SSO authentication provider;
- determining one or more permissions in the cloud-based data warehouse for the data warehouse user account;
- and
- updating the one or more permissions in the data analytics user account to match the one or more permissions in the cloud-based data warehouse for the data warehouse user account in response to determining a permission in the cloud-based data warehouse for the data warehouse user account is more restrictive than a permission in the data analytics user account.
Dependencies are inferred from the claim text.