US 2024/0403472 A1 · Methods and Systems for Tenancy in a Multitenant Environment

Abstract

Systems, methods and computer program products for controlling access to an organization's data in a multitenant environment are provided. An organization hierarchy is defined at a multitenant platform, the organization hierarchy comprising an organization and a plurality of sites owned by the organization, each of the plurality of sites representing a data isolation boundary for the organization's data. The sites are associated with subscriptions to applications of the multitenant platform. The organization can designate user partitions within the sites, each user partition designating a corresponding set of site users and a corresponding authentication service. The multitenant platform enables access to each subscription of a site only if a site user is authenticated by the authentication service designated in the user partition corresponding to the site user.

Claims21

Dependent claims

(canceled)

A computer-implemented method for managing access to data in a multitenant environment, the method comprising:

defining an organization hierarchy in a multitenant platform that provides site-level subscription-based access to one or more applications, the organization hierarchy comprising a first organization, a plurality of sites owned by the first organization, and site-level subscriptions to applications, wherein the plurality of sites represent data isolation boundaries for data of the first organization;
and
providing a user interface to an organization administrator associated with the first organization, the user interface providing a unified view of the first organization, the unified view showing the organization hierarchy for the first organization, the unified view providing a tool to allow the organization administrator to aggregate data across the plurality of sites.

A computer program product for controlling access to data in a multitenant environment, the computer program product comprising a non-transitory, computer-readable medium storing instructions executable by a processor to cause the processor to perform:

defining an organization hierarchy in a multitenant platform that provides site-level subscription-based access to one or more applications, the organization hierarchy comprising a first organization, a plurality of sites owned by the first organization, and site-level subscriptions to applications, wherein the plurality of sites represent data isolation boundaries for data of the first organization;
and
providing a user interface to an organization administrator associated with the first organization, the user interface providing a unified view of the first organization, the unified view showing the organization hierarchy for the first organization, the unified view providing a tool to allow the organization administrator to aggregate data across the plurality of sites.

A multi-tenant system comprising:

a processor;
a memory coupled to the processor, the memory storing multi-tenant software code, the multi-tenant software code comprising instructions for:
defining an organization hierarchy in a multitenant platform that provides site-level subscription-based access to one or more applications, the organization hierarchy comprising an organization, a plurality of sites owned by the organization, site-level subscriptions to applications, and user partitions for the plurality of sites, each user partition defining a membership and having an associated authentication service, wherein the plurality of sites represent data isolation boundaries for data of the organization;
providing a user interface to an organization administrator associated with the organization, the user interface providing a unified view of the organization, the unified view showing the organization hierarchy for the organization, the unified view providing a tool to allow the organization administrator to aggregate data across the plurality of sites;
and
authenticating users to access the site-level subscriptions of the plurality of sites according to the user partitions and the authentication services associated with the user partitions.

3 more elements

Dependencies are inferred from the claim text.

Facts

Application

18/758,340Filed 28 Jun 2024

Priority

8 Jun 2020

Published

5 Dec 2024

Term ends

Not estimatedThe source records don’t support an estimate.

Classification7 codes

G06F 21/6218
Protecting access to data via a platform, e.g. using keys or access control rules: to a system of files or objects, e.g. local or distributed file…
G06F 21/31
Authentication, i.e. establishing the identity or authorisation of security principals: user authentication
H04L 63/102
For controlling access to devices or network resources: entity profiles
H04L 63/105
For controlling access to devices or network resources: multiple levels of security

Family

Application16/895,948Continuation · filed 8 Jun 2020

Application18/165,164Continuation · filed 6 Feb 2023

Application18/758,340Continuation

US 11,574,068 B2Related patent

US 12,050,709 B2Related patent

US 12,561,468 B2Related patent

US 2021/0383005 A1Published application

US 2023/0185948 A1Published application

US 2024/0403472 A1This patent

From the US filing history. Foreign family members aren’t listed.

Methods and Systems for Tenancy in a Multitenant Environment

Life of this patent

Methods and Systems for Tenancy in a Multitenant Environment

Life of this patent

Abstract

Claims21