Indexing entities and attributes for policy enforcement

A network computer for managing interactions with applications, comprising:

• a non-transitory memory that stores at least instructions;
• and
• one or more processors that execute instructions that are configured to cause actions, including:
• collecting a plurality of policies and a plurality of entities for the computing environment;
• obtaining one or more indexes based on one or more features of the plurality of entities, wherein each entry in the one or more indexes is associated with a feature of an entity and one or more portions of the plurality of policies;
• and
• employing an authorization request to perform further actions, including:
• collecting one or more authorization attributes based on the authorization request;
• collecting one or more index entries from the one or more indexes based on the one or more authorization attributes, wherein the one or more authorization attributes correspond to one or more entity features associated with the one or more index entries;
• collecting one or more policies based on the one or more index entries, wherein each policy is associated with at least one index entry;
• obtaining an authorization answer based on the one or more policies and the authorization request;
• and
• reclassifying, using an execution resolver, one or more conditional policies as one or more trivial policies or one or more non-trivial policies based on one or more reduced policies;
• and
• obtaining a user interface that includes one or more display panels for content that includes one or more of the authorization answer, an authorization report, a recommendation, or other information associated with the plurality of policies that is dynamically transformed and arranged for display to a user based on one or more of user interaction telemetry, user feedback or telemetry metrics.

A processor readable non-transitory storage media that includes instructions configured for managing interactions with applications in a computing environment, wherein execution of the instructions by one or more processors on one or more network computers performs actions, comprising:

• obtaining one or more indexes based on one or more features of the plurality of entities, wherein each entry in the one or more indexes is associated with a feature of an entity and one or more portions of the plurality of policies;
• and
• employing an authorization request to perform further actions, including:
• collecting one or more authorization attributes based on the authorization request;
• collecting one or more index entries from the one or more indexes based on the one or more authorization attributes, wherein the one or more authorization attributes correspond to one or more entity features associated with the one or more index entries;
• collecting one or more policies based on the one or more index entries, wherein each policy is associated with at least one index entry;
• obtaining an authorization answer based on the one or more policies and the authorization request;
• and
• reclassifying, using an execution resolver, one or more conditional policies as one or more trivial policies or one or more non-trivial policies based on one or more reduced policies;
• and
• obtaining a user interface that includes one or more display panels for content that includes one or more of the authorization answer, an authorization report, a recommendation, or other information associated with the plurality of policies that is dynamically transformed and arranged for display to a user based on one or more of user interaction telemetry, user feedback or telemetry metrics.