Tag based permission system and method for virtualized environments
AssigneeVMware, Inc.
InventorJianping YANG
Life of this patent
Estimating the term…
Abstract
A virtualized computing system includes a plurality of inventory objects and an access control subsystem that manages permissions to perform actions on the inventory objects using corresponding access control labels of the inventory objects. Permissions are managed by detecting a change in an association of a tag with an inventory object, where the tag defines one or more users and one or more privileges. In response to the detecting, an access control label of the inventory object is updated based on the users and privileges that are defined by the tag.
Claims20
In a virtualized computing system having a plurality of inventory objects and an access control subsystem that manages permissions to perform actions on the inventory objects using corresponding access control labels of the inventory objects, a method of managing the permissions comprising:
- detecting a change in an association of a tag with an inventory object, the tag defining one or more users and one or more privileges;
- and
- in response to said detecting, updating an access control label of the inventory object based on the users and privileges that are defined by the tag.
In a virtualized computing system having a plurality of inventory objects and an access control subsystem that manages permissions to perform actions on the inventory objects using corresponding access control labels of the inventory objects, a method of managing the permissions comprising:
- detecting a change in contents of a tag that defines one or more users and one or more privileges;
- and
- in response to said detecting, updating access control labels of inventory objects that the tag is associated with, based on the users and privileges that are defined by the tag.
A virtualized computing system comprising:
- a plurality of hosts executing virtualization software configured to support the execution of virtual machines therein;
- and
- a tag configured to be associated with one or more of the hosts and virtual machines, wherein the tag defines user privileges to be propagated to the one or more hosts and virtual machines.
Dependencies are inferred from the claim text.