Computing system permission administration engine

A non-transitory computer-readable medium comprising computer-readable program code capable of being executed by one or more processors when, the program code comprising computer-readable instructions configurable to cause:

• granting, to one or more user accounts, a first permission set including one or more permissions of a plurality of permissions associated with the on-demand computing services environment, each of the plurality of permissions corresponding to a respective one or more of a plurality of actions permitted to be performed by the on-demand computing services environment, wherein a machine learning classification procedure is used to generate the first permission set from the plurality of permissions associated with the on-demand computing services environment;
• monitoring use of the one or more permissions by the one or more user accounts;
• determining, based on the monitoring, one or more atypical permission set usages by the one or more user accounts;
• in response to the determining, identifying a designated permission set based, at least in part, on the determined atypical permission set usages;
• and
• recommending that the first permission set be updated to the designated permission set for the one or more user accounts.

A system comprising:

• a database system implemented using a server system, the database system configurable to cause:
• granting, to one or more user accounts, a first permission set including one or more permissions of a plurality of permissions associated with the on-demand computing services environment, each of the plurality of permissions corresponding to a respective one or more of a plurality of actions permitted to be performed by the on-demand computing services environment wherein a machine learning classification procedure is used to generate the first permission set from the plurality of permissions associated with the on-demand computing services environment;
• monitoring use of the one or more permissions by the one or more user accounts;
• determining, based on the monitoring, one or more atypical permission set usages by the one or more user accounts;
• in response to the determining, identifying a designated permission set based, at least in part, on the determined atypical permission set usages;
• and
• recommending that the first permission set be updated to the designated permission set for the one or more user accounts.