System and method for identity modeling and effective permission management

A non-transitory computer-readable medium storing a set of instructions for identity modeling and effective permission management in a cloud computing environment, the set of instructions comprising:

• one or more instructions that, when executed by one or more processing circuitries of a device, cause the device to:
• access a first identity provider system to detect a first identity, the first identity including a first permission;
• access a second identity provider system to detect a second identity, the second identity including a second permission;
• generate in a control database a representation of a canonical identity;
• generate in the control database a representation of the first identity, and a representation of the second identity;
• generate in the control database a connection between canonical identity and:
• the representation of the first identity, and the representation of the second identity;
• generate a representation of the first permission and generate a representation of the second permission in the control database;
• connect the representation of the first permission to the representation of the first identity and connect the representation of the second permission to the representation of the second identity;
• determine an effective permission for the canonical identity based on each identity representation connected to the canonical identity;
• determine a state of an entity connected to the canonical identity;
• and
• detect a cybersecurity risk based on the determined state and the determined effective permission.

A system for identity modeling and effective permission management in a cloud computing environment comprising:

• one or more processing circuitries configured to:
• access a first identity provider system to detect a first identity, the first identity including a first permission;
• access a second identity provider system to detect a second identity, the second identity including a second permission;
• generate in a control database a representation of a canonical identity;
• generate in the control database a representation of the first identity, and a representation of the second identity;
• generate in the control database a connection between canonical identity and:
• the representation of the first identity, and the representation of the second identity;
• generate a representation of the first permission and generate a representation of the second permission in the control database;
• connect the representation of the first permission to the representation of the first identity and connect the representation of the second permission to the representation of the second identity;
• determine an effective permission for the canonical identity based on each identity representation connected to the canonical identity;
• determine a state of an identity connected to the canonical identity;
• and
• detect a cybersecurity risk based on the determined state and the determined effective permission.