Forecast-based permissions recommendations

A computer-implemented method comprising:

• identifying at least a first permission allocated to a first identity managed by an identity management service;
• analyzing permission usage information comprising a permission usage history of the first identity and permission usage pattern data;
• forecasting, based at least in part on the permission usage information, an estimated probability of a future usage of the first permission by the first identity;
• determining, based at least in part on a comparison of the estimated probability to a threshold probability, a first recommendation relating to allocation of the first permission to the first identity;
• and
• providing an indication of the first recommendation to a user.

One or more non-transitory computer-readable storage media having stored thereon computing instructions that, upon execution by one or computing devices, cause the one or more computing devices to perform operations comprising:

• identifying at least a first permission allocated to a first identity managed by an identity management service;
• analyzing permission usage information comprising a permission usage history of the first identity;
• forecasting, based at least in part on the permission usage information, an estimated probability of a future usage of the first permission by the first identity;
• determining, based at least in part on a comparison of the estimated probability to a threshold probability, a first recommendation relating to allocation of the first permission to the first identity, wherein the first recommendation is a recommendation for the first identity to retain the first permission or a recommendation to deallocate the first permission from the first identity;
• and
• providing an indication of the first recommendation to a user.