# US 9,521,137 B2 · Role-based access tool > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 9,521,137 B2 - Document ID: US9521137B2 - Status: Granted - Kind: B2 - Application number: 15/166,402 - Filed: 2016-05-27 - Published: 2016-09-29 - Granted: 2016-12-13 - Earliest claimed: 2015-01-01 - Assignees: Bank of America Corporation - Applicants: Bank of America Corporation - Inventors: Vishal Wadhwa - Web page: https://patentgrep.com/patent/US9521137B2 ## CPC - H04L 63/0815: {providing single-sign-on or federations} - G06F 21/41: where a single sign-on provides access to a plurality of computers - H04L 63/102: {Entity profiles} - H04L 63/105: {Multiple levels of security} - H04L 65/1066: Session management - H04L 67/10: in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) - H04W 12/06: Authentication - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract The tool to provide a role-based access tool is configured to receive a single sign-on login from a user; determine an identity of the user based on the single sign-on login; authorize a defined role of the user by: accessing a database comprising a plurality of users and associated roles; and determining the defined role based on the user's identity and the associated roles in the database; present one or more service catalogs to the user based on the defined role of the user; receive a request to complete an action associated with the one or more service catalogs; process the action for execution after receiving the request; and run the action on one or more systems. ## Claims ### Claim 1 A system for providing a role-based access tool, the system comprising: a memory device having computer readable program code store thereon; and a processing device coupled to the memory device, wherein the processing device executes the computer readable program code to: receive a single sign-on login from a user; determine an identity of the user based on the single sign-on login; authorize a defined role of the user by: accessing a database comprising a plurality of users and associated roles; determining a level of the user in an organization; and determining the defined role based on the identity of the user and the associated roles in the database and the level of the user; wherein the level is selected from the group consisting of a system administrator, a middleware administrator, a midrange administrator, a database administrator, and an application support specialist; present one or more service catalogs to the user based on the defined role of the user, wherein the one or more service catalogs comprise a listing of actions; receive a request to complete an action associated with the listing of actions from the one or more service catalogs, wherein the request comprises one or more systems on which to complete the action; process the action for execution after receiving the request by: identifying system parameters associated with the action; evaluating each of the one or more systems on which the action will be run to determine whether each of the one or more systems meet the system parameters; determining that each of the one or more systems meet the system parameters; and validating the action based on determining that each of the one or more systems meet the system parameters; and run the action on each of the one or more systems, wherein the user does not provide an additional sign-in login for each of the one or more systems. ### Claim 2 (depends on 1) The system of claim 1, wherein the processing device further executes the computer readable program code to: generate a report on operating status of each of the one or more systems on which the action is run. ### Claim 3 (depends on 1) The system of claim 1, wherein the one or more service catalogs are transformed based on the identity of the user, the transformation modifying the actions displayed in the service catalog based on actions the user is permitted to execute. ### Claim 4 (depends on 1) The system of claim 1, wherein the defined role comprises one or more permitted actions for the user based on the defined role. ### Claim 5 (depends on 1) The system of claim 1, wherein the level is the system administrator. ### Claim 6 (depends on 1) The system of claim 1, wherein the level is the middleware administrator. ### Claim 7 (depends on 1) The system of claim 1, wherein the level is the midrange administrator. ### Claim 8 (depends on 1) The system of claim 1, wherein the level is the database administrator. ### Claim 9 (depends on 1) The system of claim 1, wherein the level is the application support specialist. ### Claim 10 (depends on 1) The system of claim 1, wherein the one or more systems comprise a server. ### Claim 11 (depends on 1) The system of claim 1, wherein the action comprises an operating system action. ### Claim 12 (depends on 1) The system of claim 1, wherein the action comprises a network action. ### Claim 13 (depends on 1) The system of claim 1, wherein the action comprises a configuration management database action. ### Claim 14 (depends on 1) The system of claim 1, wherein the action comprises a user-defined action. ### Claim 15 (depends on 1) The system of claim 1, wherein the action comprises a custom action.