Enterprise entitlement framework

A method for associating a privilege object with a plurality of data objects in a privilege management system, the method comprising:

• in a privilege management system executing on a first processor of a first computing device, generating a batch export file that stores information relating to a plurality of privileges corresponding to a plurality of data objects, and a master list of data;
• in an application executed by a second processor of a second computing device,
• receiving the batch export file and master list of data;
• parsing the batch export file;
• and
• identifying a plurality of privileges and a plurality of corresponding data objects from the batch export file;
• associating a role with a user, wherein the role associates with the plurality of the privileges;
• comparing the batch export file to a master list of data types corresponding to a plurality of data objects stored within the privilege management system;
• and
• identifying a plurality of new data objects based on a plurality of discrepancies between the batch export file and the master list of data types,
• wherein the information relating to the plurality of privileges comprises a plurality of object templates, each object template corresponding to a data object of the plurality of data objects and comprising a plurality of flags defining a plurality of attributes that must be defined for a privilege to be granted to the data object;
• wherein the plurality of data objects comprises:
• a plurality of resource type objects representing a plurality of resource types, a resource type corresponding to a type of application;
• a plurality of hierarchy objects representing a plurality of structures, a structure comprising a plurality of levels and defining a structure of a resource type,
• a plurality of action objects representing a plurality of actions available in a privilege management system;
• a user-role map object to associate the role with the user;
• a plurality of privilege objects representing a plurality of privileges, a privilege being comprised of a selection of actions from the plurality of actions and associated with a selection of data objects from the plurality of data objects defining an application of the privilege wherein a level in the plurality of hierarchy objects is identified and applied to the privilege, and the privilege is automatically adjusted to associate a children node to the privilege when the children node is newly added to the plurality of hierarchy objects;
• a plurality of privilege cascade objects storing a privilege cascade, the privilege cascade identifying a plurality of additional hierarchy nodes to which the privilege applies based on a specified characteristic;
• and
• a plurality of privilege-action map objects for tracking and managing associations between privilege objects and action objects,
• further wherein the identifying a plurality of corresponding data objects from a plurality of data objects comprises identifying a component as at least one of:
• a resource type, a structure, an action, a privilege, and a privilege-action map.