Granularity least privilege access mechanisms

A method comprising:

• collecting data corresponding to the usage of permissions, wherein the permissions are utilized to access resources in a cloud-based computing environment that provides secure resources and services based, at least in part, on permissions associated with a requesting entity;
• analyzing the collected data utilizing one or more pre-selected parameters to determine usage levels for the permissions;
• evaluating whether one or more of the determined usage levels for the permissions is outside of a usage window for the corresponding permissions;
• generating a report of permissions having usage levels outside of the usage window for the corresponding permissions;
• and
• transmitting the report to an entity having some responsibility with respect to the usage of permissions.

A system comprising:

• a memory system having a plurality of interconnected memory devices;
• one or more hardware processors coupled with the memory system, the one or more hardware processors configurable to:
• collect data corresponding to the usage of permissions, wherein the permissions are utilized to access resources in a cloud-based computing environment that provides secure resources and services based, at least in part, on permissions associated with a requesting entity;
• analyze the collected data utilizing one or more pre-selected parameters to determine usage levels for the permissions;
• evaluate whether one or more of the determined usage levels for the permissions is outside of a usage window for the corresponding permissions;
• generate a report of permissions having usage levels outside of the usage window for the corresponding permissions;
• and
• transmit the report to an entity having some responsibility with respect to the usage of permissions.