US 11,962,511 B2 · Organization level identity management

Abstract

User identities can managed at an organization level, instead of across multiple individual resource accounts. In a resource provider environment, access to various resources and services may require users to have identities with specific resource accounts. Users can instead be associated with organization accounts, or virtual accounts that are not associated with specific resources or services. The organization accounts are attached at the appropriate location(s) in an organizational hierarchy. A user having an organization account can project the identity in any sub-account in the organization hierarchy. This can include any lower-level resource account, or can child accounts under a relevant branch of the hierarchy. A user can validate against the organization account, and receive access to the relevant service or resources using the identity projected in the corresponding resource account.

Claims20

Dependent claims

A computer-implemented method, comprising:

determining that a user does not have access to a resource;
identifying an organization account without access to or without an ability to directly access the resource, wherein the user has a user identity with the organization account and wherein the organization account is attachable to different resource accounts;
identifying one resource account of the different resource accounts that has authorization to access the resource;
determining that the one resource account is attached as a sub-account of the organization account in an organizational hierarchy;
and
granting access to the resource, wherein the access is enabled for the organization account by a call from within the one resource account.

3 more elements

Dependencies are inferred from the claim text.

Organization level identity management

Life of this patent

Organization level identity management

Life of this patent

Abstract

Claims20