Method and system for an integrated process to streamline privileged access management
AssigneeSaudi Arabian Oil Company
InventorsFatima D. Alburaikan, Ahmad S. Lutfullah
Life of this patent
Estimating the term…
Abstract
A method for an integrated process to streamline privileged access management (PAM) allows an integration of an existing PAM system with a self-service portal at the front, and an existing back-end workflow automation engine, is disclosed. In the method, a request for an elevation for an access to an application is received from a user via a self-service portal, and the request is reviewed by a PAM system administrator. Then, a process, which enables a policy of the application corresponding to a policy chosen by the user, is initiated when the PAM system administrator approves the request. Finally, a grant of the access to the application is notified to the user via the self-service portal.
Claims14
A method for an integrated process to streamline privileged access management (PAM), the method comprising:
- receiving a request for an elevation for an access to an application from a user via a self-service portal;
- reviewing the request by a PAM system administrator;
- initiating a process to enable a policy of the application corresponding to a policy chosen by the user, in response to an approval to the request from the PAM system administrator;
- and
- notifying a grant of the access to the application to the user via the self-service portal,
- wherein the user chooses between a pre-published elevation policy that is provided in the self-service portal and a custom elevation policy that is not provided in the self-service portal, for the request,
- wherein the custom elevation policy comprises parameters and targeted computing devices along with a command, and
- wherein, in response to the user choosing the custom elevation policy, the method comprises:
- notifying the PAM system administrator of the custom elevation policy;
- and
- publishing the custom elevation policy on the self-service portal.
A system for an integrated process to streamline privileged access management (PAM), the system comprising:
- a self-service portal for a user to submit a request for an elevation to access to an application;
- and
- a backend workflow, in communication with a PAM system administrator, to handle the request,
- wherein the PAM system administrator reviews the request,
- wherein the backend workflow initiates a process to enable a policy of the application corresponding to a policy chosen by the user, in response to an approval to the request from the PAM system administrator,
- wherein a notification of a grant of an access to the application is sent to the user via the self-service portal,
- wherein the user chooses between a pre-published elevation policy that is provided in the self-service portal and a custom elevation policy that is not provided in the self-service portal, for the request,
- wherein the custom elevation policy comprises parameters and targeted computing devices along with a command, and
- wherein, in response to the user choosing the custom elevation policy, the self-service portal:
- notifies the PAM system administrator of the custom elevation policy;
- and
- publishes the custom elevation policy.
A non-transitory computer readable medium storing instructions executable by a computer processor, the instructions comprising functionality for:
- receiving a request for an elevation for an access to an application from a user via a self-service portal;
- reviewing the request by a PAM system administrator;
- initiating a process to enable a policy of the application corresponding to a policy chosen by the user, in response to an approval to the request from the PAM system administrator;
- and
- notifying a grant of the access to the application to the user via the self-service portal,
- wherein the user chooses between a pre-published elevation policy that is provided in the self-service portal and a custom elevation policy that is not provided in the self-service portal, for the request,
- wherein the custom elevation policy comprises parameters and targeted computing devices along with a command, and
- wherein, in response to the user choosing the custom elevation policy, the functionality comprises:
- notifying the PAM system administrator of the custom elevation policy;
- and
- publishing the custom elevation policy on the self-service portal.
Dependencies are inferred from the claim text.