Using data analytics and crowdsourcing to determine roles for a computer system

In an environment wherein multiple users must each be able to access a particular computer system to perform respective functions, a method comprising the steps of:

• mining, by a computer device using a data integration tool, initial data from one or more data sources, wherein at least some of the mined initial data pertains to previously granted access rights for the particular computer system;
• executing, by the computer device using the data integration tool, rules to clean and map data fragments of the mined initial data onto a normalized model;
• generating, by the computer device using the data integration tool, a specified crowdsourcing task using the cleaned and mapped initial data;
• executing, by the computer device using the data integration tool, the specified crowdsourcing task to acquire crowdsourced data from subject matter experts (SMEs) in an SME population, wherein the crowdsourced data comprises additional data pertaining to the previously granted access rights for the particular computer system;
• resolving, by the computer device using the data integration tool, inconsistencies in the cleaned and mapped initial data and the crowdsourced data by removing duplicate Internet Protocol (IP) addresses, removing conflicts between two sets of roles with a same IP address and hostname, removing conflicts of same endpoints and different service names, removing conflicts of same endpoints and different host names with same IP addresses, removing conflicts of same endpoints and different IP addresses with same host names, removing conflicts of same endpoints with different platforms, and removing conflicts of same endpoints with different customers;
• generating, by the computer device using the data integration tool, a set of role definitions using the cleaned and mapped initial data and the crowdsourced data with resolved inconsistencies, wherein the generated set of role definitions determine which of the multiple users are assigned to be members of a particular role associated with the particular computer system, and further determine access rights for the particular computer system that are granted to each member of the particular role;
• and
• loading, by the computer device using an identity and access component, the generated set of role definitions into an access control system that controls user access to the particular computer system based on whether a user requesting access is a member of the particular role associated with the particular computer system as defined by the generated set of role definitions.