Action first permission management system in cloud computing

A computer program product for managing permissions in cloud computing, the computer program product comprising a computer readable storage medium having program instructions stored therewith, the program instructions executable by one or more processors, the program instructions executable to:

• detect n times of attempts of an action in cloud computing, wherein the n times of attempts are initiated by a user who has no permission to perform the action, wherein n is a predetermined number triggering generation of a request for a permission to perform the action;
• generate the request for the permission for the user, in response to the n times of attempts;
• determine whether the request has been pre-approved;
• in response to determining that the request has been pre-approved, automatically approve the request and allow the user to perform the action;
• and
• in response to determining that the request has not been pre-approved, add metadata about the user to the request and sending the request with the metadata to a cloud administrator, wherein based on the metadata the cloud administrator approves or denies the request.

A computer system for managing permissions in cloud computing, the computer system comprising one or more processors, one or more computer readable tangible storage devices, and program instructions stored on at least one of the one or more computer readable tangible storage devices for execution by at least one of the one or more processors, the program instructions executable to:

• detect n times of attempts of an action in cloud computing, wherein the n times of attempts are initiated by a user who has no permission to perform the action, wherein n is a predetermined number triggering generation of a request for a permission to perform the action;
• generate the request for the permission for the user, in response to the n times of attempts;
• determine whether the request has been pre-approved;
• in response to determining that the request has been pre-approved, automatically approve the request and allow the user to perform the action;
• and
• in response to determining that the request has not been pre-approved, add metadata about the user to the request and sending the request with the metadata to a cloud administrator, wherein based on the metadata the cloud administrator approves or denies the request.