Nested tenancy that permits a hierarchy having a plurality of levels
AssigneeSalesforce, Inc.
InventorsBenjamin Busjaeger, Koson Thambundit, Jeremy Horwitz, Michael Sgroi, Jeffrey M. Bergan, Benjamin James Fry, Brian Robert McNamara
Life of this patent
Estimating the term…
Abstract
A multi-tenant computer system implements a platform for providing data protection scopes to shared infrastructure services according to a nested tenant model that permits a hierarchy having a plurality of levels. The multi-tenant computer system provisions data protection scopes for cloud products, service products, cloud product tenants, service products operating in the context of cloud products, service products operating in the context of cloud product tenants, and combinations of the foregoing.
Claims20
A method, comprising:
- implementing, by a computer system, a platform for providing data protection scopes to shared infrastructure services according to a nested tenancy model that permits a hierarchy having a plurality of levels, wherein a given level, of the plurality of levels in the hierarchy, is associated with a level of access to one or more of the shared infrastructure services;
- receiving, by the computer system, a first request to provision, for a particular shared infrastructure service, a first data protection scope for a first cloud product having a first set of tenants, wherein a cloud product is software accessible to a set of tenants and operable to perform a set of functions for the set of tenants;
- in response to the first request, provisioning the first data protection scope for the first cloud product at a top-most level of the hierarchy, wherein the top-most level of the hierarchy is associated with a particular level of access to the particular shared infrastructure service;
- receiving, by the computer system, a second request to provision, for the particular shared infrastructure service, a second data protection scope for a second cloud product having a second, different set of tenants;
- in response to the second request, provisioning the second data protection scope for the second cloud product at the top-most level of the hierarchy;
- receiving, by the computer system, a third request to provision, for the particular shared infrastructure service, a third data protection scope for a service product, wherein the service product is software operable to access data on behalf of the first and second cloud products and/or tenants of the first and second cloud products;
- in response to the third request, provisioning the third data protection scope for the service product at the top-most level of the hierarchy;
- receiving, by the computer system, an access request from a remote computer system to access information associated with a particular data protection scope at a particular level of the hierarchy, wherein the access request is received via a URL that indicates the particular data protection scope;
- and
- wherein adding 1) cloud products with different sets of tenants and 2) service products to the top-most level of the hierarchy permits the platform to scale without reconfiguring entities currently managed by the platform.
A non-transitory, computer-readable storage medium storing program instructions that are capable of being executed by a computer system to perform operations comprising:
- implementing a platform for providing data protection scopes to shared infrastructure services according to a nested tenancy model that permits a hierarchy having a plurality of levels, wherein a given level, of the plurality of levels in the hierarchy, is associated with a level of access to one or more of the shared infrastructure services;
- receiving a first request to provision, for a particular shared infrastructure service, a first data protection scope for a first cloud product having a first set of tenants, wherein a cloud product is software accessible to a set of tenants and operable to perform a set of functions for the set of tenants;
- in response to the first request, provisioning the first data protection scope for the first cloud product at a top-most level of the hierarchy, wherein the top-most level of the hierarchy is associated with a particular level of access to the particular shared infrastructure service;
- receiving a second request to provision, for the particular shared infrastructure service, a second data protection scope for a second cloud product having a second, different set of tenants;
- in response to the second request, provisioning the second data protection scope for the second cloud product at the top-most level of the hierarchy;
- receiving a third request to provision, for the particular shared infrastructure service, a third data protection scope for a service product, wherein the service product is software operable to access data on behalf of the first and second cloud products and/or tenants of the first and second cloud products;
- in response to the third request, provisioning the third data protection scope for the service product at the top-most level of the hierarchy;
- receiving an access request from a remote computer system to access information associated with a particular data protection scope at a particular level of the hierarchy, wherein the access request is received via a URL that indicates the particular data protection scope;
- and
- wherein adding 1) cloud products with different sets of tenants and 2) service products to the top-most level of the hierarchy permits the platform to scale without reconfiguring entities currently managed by the platform.
A computer system, comprising:
- a processor system;
- a memory storing program instructions that are executable by the processor system to perform operations comprising:
- implementing a platform for providing data protection scopes to shared infrastructure services according to a nested tenancy model that permits a hierarchy having a plurality of levels, wherein a given level, of the plurality of levels in the hierarchy, is associated with a level of access to one or more of the shared infrastructure services;
- receiving a first request to provision, for a particular shared infrastructure service, a first data protection scope for a first cloud product having a first set of tenants, wherein a cloud product is software accessible to a set of tenants and operable to perform a set of functions for the set of tenants;
- in response to the first request, provisioning the first data protection scope for the first cloud product at a top-most level of the hierarchy, wherein the top-most level of the hierarchy is associated with a particular level of access to the particular shared infrastructure service;
- receiving a second request to provision, for the particular shared infrastructure service, a second data protection scope for a second cloud product having a second, different set of tenants;
- in response to the second request, provisioning the second data protection scope for the second cloud product at the top-most level of the hierarchy;
- receiving a third request to provision, for the particular shared infrastructure service, a third data protection scope for a service product, wherein the service product is software operable to access data on behalf of the first and second cloud products and/or tenants of the first and second cloud products;
- in response to the third request, provisioning the third data protection scope for the service product at the top-most level of the hierarchy;
- receiving an access request from a remote computer system to access information associated with a particular data protection scope at a particular level of the hierarchy, wherein the access request is received via a URL that indicates the particular data protection scope;
- and
- wherein adding 1) cloud products with different sets of tenants and 2) service products to the top-most level of the hierarchy permits the platform to scale without reconfiguring entities currently managed by the platform.
Dependencies are inferred from the claim text.