Automatic generation of user account policies based on configuration management database information
AssigneeInternational Business Machines Corporation
InventorsAna C. Biazetti, Jeffrey T. Robke
Life of this patent
Estimating the term…
Abstract
Mechanisms are provided for generating user account policies for generating user accounts to access resources of the data processing system. A determination is made that a user account policy for an identified resource in the data processing system is to be generated. Configuration information associated with the identified resource is retrieved from a configuration information database. A predefined user account policy template is retrieved from a user account policy template database system. A user account policy data structure is generated based on the retrieved configuration information and the retrieved predefined user account policy template.
Claims14
A computer program product comprising a computer readable storage medium having a computer readable program stored therein, wherein the computer readable program, when executed on a computing device, causes the computing device to:
- determine that a user account policy for an identified resource in a data processing system is to be generated;
- retrieve configuration information associated with the identified resource from a configuration information database;
- retrieve a predefined user account policy template from a user account policy template database system, wherein the predefined user account policy template is a template data structure with generic user account information for the identified resource;
- and
- generate a user account policy data structure based on the retrieved configuration information and the retrieved predefined user account policy template by combining a plurality of predefined user account policy templates in the predefined user account policy template, and corresponding configuration data from the retrieved configuration information, to generate a single user account policy data structure, wherein the plurality of predefined user account policy templates are selected in accordance with dependency information, in the configuration information, specifying a dependency of resources upon one another in the data processing system, wherein the user account policy data structure is a data structure identifying a manner by which user accounts for an application are to be created and maintained, and wherein a user account is a data structure that stores information in a user registry for giving a user access to the application.
An apparatus, comprising:
- a processor;
- and
- a memory coupled to the processor, wherein the memory comprises instructions which, when executed by the processor, cause the processor to:
- determine that a user account policy for an identified resource in the data processing system is to be generated;
- retrieve configuration information associated with the identified resource from a configuration information database;
- retrieve a predefined user account policy template from a user account policy template database system, wherein the predefined user account policy template is a template data structure with generic user account information for the identified resource;
- and
- generate a user account policy data structure based on the retrieved configuration information and the retrieved predefined user account policy template by combining a plurality of predefined user account policy templates in the predefined user account policy template, and corresponding configuration data from the retrieved configuration information, to generate a single user account policy data structure, wherein the plurality of predefined user account policy templates are selected in accordance with dependency information, in the configuration information, specifying a dependency of resources upon one another in the data processing system, wherein the user account policy data structure is a data structure identifying a manner by which user accounts for an application are to be created and maintained, and wherein a user account is a data structure that stores information in a user registry for giving a user access to the application.
Dependencies are inferred from the claim text.