Multi-level multi-tenant cross authorization management method

Abstract

The invention relates to a multi-level multi-tenant cross authorization management method, which comprises the following steps: defining a plurality of management roles in different organizations, and carrying out access permission and resource configuration on the management roles; selecting cross-server users in different organizations from the management role, and mounting the cross-server users on the management role to form a cross management role; and presetting a role consignment rule, and endowing the cross management role to a user according to the role consignment rule. The cross authorization and resource access of different management nodes can be carried out across organizations, the authorization tree can realize cross authorization management on all tenants, the authorization trees of all roles do not need to be modified in batches for newly introduced tenants, and the workload is very small. According to the invention, on the basis of a plurality of stackable tree-shaped management architectures, a plurality of layers of special management relationships are stacked, and cross authorization of a classical architecture and special requirements is considered, so that a management architecture which cannot be realized by a multi-tenant system of a traditional tree-shaped management architecture can be met.

Description

technical field [0001] The present disclosure relates to the technical field of user rights management, and in particular to a multi-level multi-tenant cross-authorization management method, authorization tree and device. Background technique [0002] A multi-tenant system means that the same system instance can serve multiple organizations at the same time (each organization is called a tenant). The resources between organizations are isolated from each other, and organizations cannot directly discover each other. [0003] Such as figure 1 In the multi-level multi-tenant system shown, in the multi-tenant system, there is an ownership relationship between tenants. This multi-level multi-tenant system generally has the following two characteristics: [0004] (1) The organizational relationship between tenants is a tree type. High-level tenants can access the resources of lower-level tenants under their branches. 1 cannot access the resources of intermediate tenant 2; [00...

AI Technical Summary

Problems solved by technology

[0004] (1) The organizational relationship between tenants is tree-shaped, and high-level tenants can access the resources of lower-level tenants under their branches. For example, high-level tenant 1 in the figure can access Intermediate tenant 1 and the resources of all ordinary tenants under it, but advanced tenant 1 cannot access the resources of intermediate tenant 2;

[0005] (2) Resources among most tenants are still isolated, for example, intermediate tenant 1 in the figure cannot access the resources of intermediate tenant 2

[0009] Therefore, for SD-WAN usage scenarios, there are a large number of situations that cannot be expressed by the traditional tree structure, so it is necessary to design a more suitable tree structure that takes into account various authorization requirements

Images