Automated Organizational Role Modeling For Role Based Access Controls

A computer program product comprising a computer-useable medium having a computer readable program, wherein the computer readable program when executed on a computer causes the computer to:

• accessing existing permissions granted to users in an organizational environment;
• analyzing the permissions to create permission characteristics;
• performing cladistics analysis on the permission characteristics to determine role perspective relationships between individual users of the organizational environment;
• and
• generating a role based access control model for the organizational environment based on the determined role perspective relationships between individual users of the organizational environment.

A hierarchical role based access control (HRBAC) modeling system, the system comprising:

• an environment interface module to receive an indication of existing permissions granted to users in an organizational environment;
• a role mining module in communication with the environment interface module to analyze the permissions to create permission characteristics and to perform cladistics analysis on the permission characteristics to determine role perspective relationships between individual users of the organizational environment;
• and
• a role perspective analyzer module in communication with the role mining module to generate a role based access control model based on the determined role perspective relationships.

A method for providing a hierarchical role based access control (HRBAC) model service to a client, the method comprising:

• receiving an indication of existing permissions granted to users of an organizational environment of the client;
• analyzing the permissions to create permission characteristics;
• performing cladistics analysis on the permission characteristics and generating an HRBAC model specifying role perspective relationships between individual users of the client organizational environment;
• and
• providing the generated HRBAC model to the client.