Metadata driven selection of entitlements in an identity governance system
AssigneeInternational Business Machines Corporation
InventorsDavid Kuehr-McLaren, Gabriel C. Rebane
Life of this patent
Estimating the term…
Loading patent…
AssigneeInternational Business Machines Corporation
InventorsDavid Kuehr-McLaren, Gabriel C. Rebane
Estimating the term…
An identity governance system that automates launching of identity campaigns (e.g., attestation, certification, etc.) is augmented to provide for the more efficient generation of datasets that are to be evaluated in a particular campaign review. To this end, at least one data model supported in the system is extended to support user- or system-defined metadata that, once populated with data, enable the system to generate campaign datasets from various data sources in an automated, efficient manner. Metadata includes, for example, application properties, entitlement properties, and the like. In lieu of maintaining a list of entitlements manually, an administrator defines metadata that should be associated with various datasets, e.g., for each application, entitlement, organization unit, etc. When time to generate a campaign dataset, the system examines the underlying data sources (that are extended via the metadata) to enable automated generation of a campaign dataset that includes the relevant metadata information.
A method to automate building and use of a dataset in a governance system having an organization entity-structured data model, comprising:
An apparatus, comprising:
A computer program product in a non-transitory computer readable medium for use in a data processing system, the computer program product holding computer program instructions which, when executed by the data processing system, automate building and use of a dataset in a governance system having an organization entity-structured data model, the computer program instructions comprising program code configured to:
Dependencies are inferred from the claim text.