US 2025/0094615 A1 · AUTOMATED AUTHORIZATION MANAGEMENT OF DATABASE ACCOUNTS

Abstract

Techniques described herein relate to automated management of database accounts within cloud environments and other large-scale computing environments. In such environments, an identity provider service for an organization may maintain the various roles for the users associated with the organization. As described herein, a database account synchronization system may synchronize the user accounts within the database systems of the organization based on the corresponding roles stored within the identity provider. In some examples, the database account synchronization system may periodically query the identity provider to retrieve user-role mappings for the various user groups defined by the identity provider. For each user group, the database account synchronization system may query the organization database systems, compare the user permissions of each database to the user-role mappings within the identity provider, and update the database user accounts to synchronize the databases with the identity provider.

Claims20

Dependent claims

A computer system, comprising:

one or more processors;
and
one or more non-transitory computer-readable media storing computer-executable instructions that, when executed by the one or more processors, cause the one or more processors to perform operations comprising:
receiving a database account synchronization request associated with a cloud service provider;
accessing an identity provider service of the cloud service provider to determine a mapping of a first resource access role to a first user identity;
receiving, from the identity provider service, a web token associated with the first user identity;
logging into the cloud service provider using the web token associated with the first user identity;
receiving, from the cloud service provider, and based on successfully logging into the cloud service provider using the web token, first credentials associated with the first user identity;
accessing a first database system associated with the cloud service provider, using the first credentials, to determine a first database user corresponding to the first user identity;
and
modifying the first database user within the first database system, based at least in part on the mapping.

8 more elements

Dependencies are inferred from the claim text.

Automated authorization management of database accounts

Life of this patent

Automated authorization management of database accounts

Life of this patent

Abstract

Claims20