US 2026/0303608 A1 · Dynamic Access Roles

Abstract

Embodiments of the present disclosure provide systems and methods for dynamic access roles that can contextually assign access rights to users within a role. A dynamic access role comprises a role dimension that has a dimension criteria. The role dimension further comprises a dimension-level entitlement to be provisioned to members of the dynamic access role that satisfy the dimension criteria. User assignment contexts are evaluated to contextually assign the role dimension to users that satisfy the role membership criteria and the dimension criteria. Thus, role members can be contextually assigned the dimension and provisioned the dimension-level entitlement. The dynamic access role may have multiple such dimensions with single attribute or multi-attribute dimension criteria. Dimension-level entitlements may be assigned in addition to any role-level entitlements that get assigned to all members of the role.

Claims22

Dependent claims

An identity management system, comprising:

a processor;
a non-transitory, computer-readable storage medium including computer instructions executable by the processor for:
maintaining a dynamic access role, the dynamic access role comprising:
a role membership criteria;
a role dimension, the role dimension comprising:
a dimension criteria;
a dimension-level entitlement to be provisioned to members of the dynamic access role that satisfy the dimension criteria;
evaluating user assignment contexts to contextually assign the role dimension to users that satisfy the role membership criteria and the dimension criteria;
and
provisioning the dimension-level entitlement to the users assigned the role dimension.

7 more elements

Dependencies are inferred from the claim text.

Dynamic Access Roles

Life of this patent

Dynamic Access Roles

Life of this patent

Abstract

Claims22