Authority management device, authority management method, and authority management program

Abstract

To provide an authority management device, authority management method, and authority management program that allow a user to select and apply for a connection account according to the work content with simple operations.SOLUTION: An authority management device according to the present embodiment refers to a project master, server master work content master and connection account master, displays, for each project code, an authority matrix that can set an authority of a connection account for each server on an authority selection area on the basis of a project code entered in a project input item, a work content entered in a work input item and a work scheduled date and time entered in a connection scheduled date and time input item, and generates registration data in which the project code, work content code, connection scheduled date and time, server name, and user account identification information are associated with an application number on the basis of the selection operation of the user on the authority matrix in the authority selection area through the selection operation of the user.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present invention relates to an authority management device, an authority management method, and an authority management program. [Background technology]

[0002] Patent Document 1 discloses a technology for smoothly managing requests and approvals in a workflow for the use of resources. This technology receives a request for access permission, executes a process to notify an authority of the approval request, and when approval is received from the authority, allows the device that issued the request to connect to an object that provides a service. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2019-53560 A Summary of the Invention [Problem to be solved by the invention]

[0004] By the way, when connecting remotely to a client's environment, there is an operation where the connection application and approval are made in advance in the company's internal system. There are several types of connection accounts used for remote connection, each with different levels of authority, and the tasks that can be performed differ depending on the level of authority. For this reason, in the past, users were required to select a connection account with appropriate authority depending on the tasks to be performed when applying.

[0005] However, sometimes users apply for a connection account with excessive authority due to a lack of understanding of appropriate authority, and have to reapply each time, which is a cumbersome task.

[0006] The present invention has been made in consideration of the above, and aims to provide an authority management device, an authority management method, and an authority management program that enable selection and application of a connection account according to the work content with simple operations. [Means for solving the problem]

[0007] In order to solve the above-mentioned problems and achieve the object, the authority management device of the present invention is an authority management device having a control unit, and is capable of accessing an employee master in which employee codes are associated with employee names and employee groups, a display setting master in which employee groups are associated with setting values ​​for role display, a parameter master in which key codes are associated with setting values ​​and levels of authority, a case-personnel master in which case codes are associated with employee codes, a case master in which case codes are associated with case names, a task content master in which task content codes are associated with setting information that assigns task authority for each task group, task content, and setting value, a server master in which server names are associated with roles and case codes, and a connection account master in which server names are associated with user accounts and setting values, and the control unit has an acquisition unit that acquires the employee code of an employee who has logged in to the authority management device, and references the employee master, the display setting master, the parameter master, the case person-in-charge master, the case master, and the task content master, and acquires at least one role that the employee code acquired by the acquisition unit can be assigned to. the application input screen display control unit causes a display unit to display an application input screen having an application input screen which has a case input field from which the present case can be selected, a work input field from which at least one work content which can be handled by a group linked to the employee code acquired by the acquisition unit can be selected, a scheduled connection date and time input field from which a scheduled connection date and time can be input, and an authority selection area for setting the authority of the connection account for each server; a authority selection screen display control unit which refers to the case master, the server master, the work content master, and the connection account master, and displays in the authority selection area an authority matrix in which the authority of the connection account for each server can be set for each case code based on the case code entered in the case input field, the work content entered in the work input field, and the scheduled work date and time entered in the scheduled connection date and time input field; and a generation unit which generates registration data in which an application number is associated with a case code, a work content code, the scheduled connection date and time, a server name, and user account identification information based on a user's selection operation for each item of the authority matrix in the authority selection area by a user's selection operation.

[0008] Further, an authority management method according to the present invention is an authority management method executed by an authority management device having a control unit, the authority management device being able to access an employee master in which employee codes are associated with employee names and employee groups, a display setting master in which employee groups are associated with setting values ​​for role display, a parameter master in which key codes are associated with setting values ​​and levels of authority, a case-personnel master in which case codes are associated with employee codes, a case master in which case codes are associated with case names, a task content master in which task content codes are associated with setting information that assigns task authority for each task group, task content, and setting value, a server master in which server names are associated with roles and case codes, and a connection account master in which server names are associated with user accounts and setting values, the control unit executing the authority management method comprising the steps of: acquiring an employee code of an employee who has logged in to the authority management device; and referencing the employee master, the display setting master, the parameter master, the case-personnel master, the case master, and the task content master, and acquiring at least one of the employee codes that the employee code acquired in the acquisition step can handle. the employee code acquired in the acquisition step can be used to select at least one work content that can be handled by a group linked to the employee code acquired in the acquisition step, a scheduled connection date and time input field in which a scheduled connection date and time can be input, and an authority selection area for setting the authority of the connection account for each server; an authority selection screen display control step of referring to the case master, the server master, the work content master, and the connection account master, and displaying in the authority selection area an authority matrix in which the authority of the connection account for each server can be set for each case code based on the case code entered in the case input field, the work content entered in the work input field, and the scheduled work date and time entered in the scheduled connection date and time input field; and a generation step of generating registration data in which a case code, a work content code, a scheduled connection date and time, a server name, and a user account identification information are associated with an application number based on a user's selection operation for each item of the authority matrix in the authority selection area by a user's selection operation.

[0009] Further, an authority management program according to the present invention is an authority management program to be executed by an authority management device having a control unit, the authority management device being able to access an employee master in which an employee code is associated with an employee name and an employee group of the employee, a display setting master in which an employee group is associated with a setting value of role display, a parameter master in which a key code is associated with a setting value and each authority level, a case-person-in-charge master in which a case code is associated with a person-in-charge employee code, a case master in which a case code is associated with a case name, a task content master in which task content codes are associated with setting information that assigns task authority for each task group, task content, and setting value, a server master in which a server name is associated with a role and the case code, and a connection account master in which a server name is associated with a user account and a setting value, and the authority management program includes an acquisition step of acquiring an employee code that has logged into the authority management device to be executed by the control unit, and a process of referring to the employee master, the display setting master, the parameter master, the case-person-in-charge master, the case master, and the task content master, and acquiring an employee code that the employee code acquired in the acquisition step can assign to a task. an application input screen display control step of displaying on a display unit an application input screen having an application input screen having a case input item capable of selecting at least one case that can be handled by a group linked to the employee code acquired in the acquisition step, a work input item capable of selecting at least one work content that can be handled by a group linked to the employee code acquired in the acquisition step, a scheduled connection date and time input item capable of inputting a scheduled connection date and time, and an authority selection area for setting the authority of a connection account for each server; an authority selection screen display control step of referencing the case master, the server master, the work content master, and the connection account master, and displaying in the authority selection area an authority matrix capable of setting the authority of a connection account for each server for each case code, based on the case code input in the case input item, the work content input in the work input item, and the scheduled work date and time input in the scheduled connection date and time input item; and a generation step of generating registration data in which an application number is associated with a case code, a work content code, a scheduled connection date and time, a server name, and user account identification information, based on a user's selection operation for each item of the authority matrix in the authority selection area by a user's selection operation.It is characterized by: Effect of the Invention

[0010] According to the present invention, it is possible to reduce the amount of work and to select and apply for a connection account according to the content of the work with a simple operation. [Brief description of the drawings]

[0011] [Figure 1] FIG. 1 is a schematic diagram showing an overview in a block diagram showing an example of the configuration of a rights management device according to an embodiment. [Diagram 2] FIG. 2 is a diagram illustrating an example of an employee master table in the employee master stored in the storage unit of the authority management device according to the embodiment. [Diagram 3] FIG. 3 is a diagram illustrating another example of an employee master table in the employee master stored in the storage unit of the authority management device according to the embodiment. [Figure 4] FIG. 4 is a diagram illustrating an example of a display master table in the display master stored in the storage unit of the authority management device according to the embodiment. [Diagram 5] FIG. 5 is a diagram illustrating an example of a parameter master stored in the storage unit of the authority management device according to the embodiment. [Figure 6] FIG. 6 is a diagram illustrating an example of a case master table in the case master stored in the storage unit of the authority management device according to the embodiment. [Figure 7] FIG. 7 is a diagram illustrating an example of a case-person master table in the case-person master stored in the storage unit of the authority management device according to the embodiment. [Figure 8] FIG. 8 is a diagram illustrating an example of a task content master table in the task content master stored in the storage unit of the authority management device according to the embodiment. [Figure 9] FIG. 9 is a diagram illustrating an example of a server master table in the server master stored in the storage unit of the authority management device according to the embodiment. [Figure 10]FIG. 10 is a diagram illustrating an example of a connection account table in the connection account master stored in the storage unit of the authority management device according to the embodiment. [Figure 11] FIG. 11 is a flowchart showing an outline of the process executed by the authority management device according to the embodiment. [Figure 12] FIG. 12 is a diagram showing an example of the application input screen. [Figure 13] FIG. 13 is a diagram showing an example of a display transition of the application input screen by the case content display control unit. [Figure 14] FIG. 14 is a diagram showing another example of a display transition of the application input screen by the case content display control unit. [Figure 15] FIG. 15 is a diagram showing an example of a display transition of work contents by the work content display control unit. [Figure 16] FIG. 16 is a diagram showing an example of a display transition in a state in which predetermined content is input by a user operation. [Figure 17] FIG. 17 is a diagram showing an example of a display transition of the authority setting matrix area by the authority selection screen display control unit. [Figure 18] FIG. 18 is a diagram showing an example of a selection result when a user selects each item of the authority matrix in the authority setting matrix area. [Figure 19] FIG. 19 is a diagram showing a schematic diagram of the selection state of FIG. [Figure 20] FIG. 20 is a diagram illustrating an example of the registration data. [Figure 21] FIG. 21 is a diagram illustrating a remote connection state before approval. [Figure 22] FIG. 22 is a diagram showing a schematic diagram of a remote connection state after approval. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0012] DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, an embodiment of a right management device, a right management method, and a right management program according to the present invention will be described in detail with reference to the accompanying drawings. Note that the present invention is not limited to the present embodiment.

[0013] [1. Configuration] An example of the configuration of an authority management device according to this embodiment will be described with reference to Fig. 1 etc. Fig. 1 is a schematic diagram showing an overview in a block diagram of an example of the configuration of an authority management device.

[0014] The right management device 100 shown in Fig. 1 is a commercially available desktop personal computer. Note that the right management device 100 is not limited to a stationary information processing device such as a desktop personal computer, and may be a portable information processing device such as a commercially available notebook personal computer, a PDA (Personal Digital Assistant), a smartphone, or a tablet personal computer.

[0015] The right management device 100 includes a control unit 102, a communication interface unit 104, a storage unit 106, and an input / output interface unit 108. The units included in the right management device 100 are communicatively connected to each other via any communication path.

[0016] The communication interface unit 104 communicably connects the right management device 100 to the network 300 via a communication device such as a router and a wired or wireless communication line such as a dedicated line. The communication interface unit 104 has a function of communicating data with other devices via the communication line. Here, the network 300 has a function of connecting the right management device 100 and the server 200 so that they can communicate with each other, and is, for example, the Internet or a LAN (Local Area Network). The data stored in the storage unit 106 may be stored in the server 200, for example.

[0017] An input device 112 and an output device 114 are connected to the input / output interface unit 108. The output device 114 may be a monitor (including a home television), a speaker, or a printer. The input device 112 may be a keyboard, a mouse, a microphone, or a monitor that cooperates with a mouse to realize a pointing device function. In the following, the output device 114 may be referred to as the monitor 114, and the input device 112 may be referred to as the keyboard 112 or the mouse 112.

[0018] The storage unit 106 stores various databases, tables, files, and the like. The storage unit 106 records computer programs for cooperating with an OS (Operating System) to give instructions to a CPU (Central Processing Unit) to perform various processes. For example, memory devices such as RAM (Random Access Memory) and ROM (Read Only Memory), fixed disk devices such as hard disks, flexible disks, and optical disks can be used as the storage unit 106. The storage unit 106 stores an employee master 106a, a display setting master 106b, a parameter master 106c, a case master 106d, a case staff master 106e, a task content master 106f, a server master 106g, and a connection account master 106h.

[0019] The employee master 106a stores employee CD (code) in association with employee name and employee group. The employee master 106a also stores employee group (key) in association with employee group name. FIG. 2 is a diagram showing an example of an employee master table in the employee master 106a. FIG. 3 is a diagram showing another example of an employee master table in the employee master 106a. As shown in the first row of the employee master table T1 shown in FIG. 2, the employee CD "P001" is stored in association with the employee name "Tanaka Ichiro" and the employee group "G1". Furthermore, as shown in the first row of the employee master table T2 in FIG. 3, the employee group "G1" is stored in association with the employee group name "application manager group".

[0020] The display setting master 106b stores display setting values ​​in association with employee groups. Fig. 4 is a diagram showing an example of a display master table in the display setting master 106b. As shown in the first row of the display setting master table T3 shown in Fig. 4, the display setting value "setting value 1" is stored in association with the employee group "G1".

[0021] The parameter master 106c stores a key code, a set value, and an authority level corresponding to the set value in association with the key code. Fig. 5 is a diagram showing an example of a parameter master in the parameter master 106c. As shown in the first row of the parameter master table T4 shown in Fig. 5, the key CD "1" is stored in association with the value 1 "set value 1" and the value 2 "system administrator".

[0022] The case master 106d stores a case CD (code) in association with a case name. Fig. 6 is a diagram showing an example of a case master table in the case master 106d. As shown in the first row of the case master table T5 shown in Fig. 6, the case CD "100" is stored in association with the case name "XX Holdings".

[0023] The case staff master 106e stores case CD (code) in association with the staff member code. Fig. 7 is a diagram showing an example of a case staff master table in the case staff master 106e. As shown in the first row of the case staff master table T6 in Fig. 7, case CD (KI) "100" is stored in association with staff member CD (key) "P001".

[0024] The work content master 106f stores setting information that assigns work authority for each work group, work content, and setting value in association with the work content CD (code). FIG. 8 is a diagram showing an example of a work content master table in the work content master 106f. As shown in the first row of the work content master table T7 shown in FIG. 8, the employee group "G1", the work content name "Program delivery", setting value 1 "Available", setting value 2 "Available", and setting value 3 "Recommended for use" are stored in association with the work content CD (key) "10000". Note that setting values ​​4, 5, and n (n=an integer of 6 or more) can be appropriately set by an authorized person according to the work content and the type of setting value.

[0025] The server master 106g stores a server name in association with a role and a case CD (code). Fig. 9 is a diagram showing an example of a server master table in the server master 106g. As shown in the first row of the server master table T8 shown in Fig. 9, the server name (key) "a100001" is stored in association with the role "DB server" and the case CD "100".

[0026] The connection account master 106h stores a server name in association with a user account and a setting value. Fig. 10 is a diagram showing an example of a connection account table in the connection account master 106h. As shown in the first row of the connection account master table T9 shown in Fig. 10, a user account ID "User01" and a setting value "setting value 1" are stored in association with a server name (key) "a100001".

[0027] Returning to FIG. 1, the description of the configuration of the right management device 100 will continue. The control unit 102 is a CPU or the like that performs overall control of the authority management device 100. The control unit 102 has an internal memory for storing control programs such as an OS, programs that define various processing procedures, required data, and the like, and executes various information processing based on these stored programs. The control unit 102 includes an acquisition unit 102a, an application input screen display control unit 102b, a case content display control unit 102c, a work content display control unit 102d, an authority selection screen display control unit 102e, a determination unit 102f, and a generation unit 102g.

[0028] The acquiring unit 102 a acquires the employee CD who is currently logged in to the authority management device 100 .

[0029] The application input screen display control unit 102b displays the application input screen on the monitor 114. Details of the application input screen will be described later.

[0030] When a user selects the search button in the case selection cell on the application input screen using the mouse 112, the case content display control unit 102c refers to the employee master table T1, the case master table T5, and the case-in-charge master table T6, and displays the cases in charge of the employee CD on the application input screen so that they can be selected.

[0031] The work content display control unit 102d refers to the employee master 106a and the work content master 106f, and displays work contents according to the employee group on the application input screen in a selectable manner.

[0032] The authority selection screen display control unit 102e refers to the case master 106d, the work content master 106f, the server master 106g, and the connection account master 106h, and displays an authority matrix for setting the authority of the connection account for each server in the authority setting matrix area on the application input screen.

[0033] The determination unit 102f determines whether or not various buttons on the application input screen have been pressed. Specifically, the determination unit 102f determines whether or not the user has pressed the connection target display button and the registration button on the application input screen by operating the mouse 112.

[0034] The generating unit 102g generates registration data corresponding to each item of the authority matrix selected on the application input screen. Specifically, the generating unit 102g generates registration data in which the application number is associated with the case CD, the work content CD, the scheduled connection date and time, and the association information that associates the server name with the user account ID, based on a combination table of the server and the connection account that performs the application selected on the application input screen.

[0035] [2. Processing performed by the authority management device] Next, a description will be given of the processing executed by the right management device 100. Fig. 11 is a flow chart showing an outline of the processing executed by the right management device 100.

[0036] As shown in FIG. 11, first, the acquiring unit 102a acquires the employee CD currently logged in to the authority management device 100 (step S101).

[0037] Next, the application input screen display control unit 102b displays the application input screen on the monitor 114 (step S102).

[0038] 12 is a diagram showing an example of an application input screen. As shown in FIG. 12, the application input screen display control unit 102b displays an application input screen P1 on the monitor 114.

[0039] The application input screen P1 includes a case selection cell K1 for selecting a case, a work content selection cell K2 for selecting work content, a scheduled connection date and time input cell K3 for inputting a scheduled connection date and time, a case in charge check box K4 for instructing to display only the cases in charge of the logged-in employee CD, and an authority matrix area M1 for selecting the authority of the connection account for each case in charge and for each work content. Note that the case in charge check box K4 corresponds to the case in charge input section in the embodiment.

[0040] As shown in FIG. 12, the application input screen display control unit 102b displays the application input screen P1 in which the case selection cell K1, the work content selection cell K2, the scheduled connection date and time input cell K3, and the authority matrix area M1 are empty.

[0041] 12, the application input screen display control unit 102b refers to the employee master table T1 of the employee master 106a, the display setting master table T3 of the display setting master 106b, and the parameter master table T4 of the parameter master 106c, and displays in the authority matrix area M1 the values ​​of the display setting master 106b linked to the employee CD "P001" (see area R1) acquired by the acquisition unit 102a. Specifically, in the column to the right of the item "role" in the authority matrix area M1, the application input screen display control unit 102b displays the items "system administrator", "DB administrator", and "general user" of the parameter master table T4 corresponding to the "setting value 1", "setting value 2", and "setting value 3" of the display setting master 106b linked to the employee group "G1" of the employee CD "P001" acquired by the acquisition unit 102a.

[0042] Next, when the user selects the search button B1 of the case selection cell K1 using the mouse 112, the case content display control unit 102c displays the cases in charge corresponding to the employee CD in a selectable manner (step S103).

[0043] Fig. 13 is a diagram showing an example of the display transition of the application input screen P1 by the case content display control unit 102c. As shown in Fig. 13, when the search button B1 of the case selection cell K1 is selected in a case where the case check box K4 is checked, the case content display control unit 102c refers to the employee master table T1, the case master table T5, and the case person master table T6, and displays only the cases in charge of the logged-in employee CD "P001" (see area R1), "XX Holdings" and "XX Construction", on the application input screen P1. This allows the user to easily select a desired case from the cases that can be handled, displayed, using the mouse 112.

[0044] FIG. 14 is a diagram showing another example of the display transition of the application input screen by the case content display control unit 102c. As shown in FIG. 14, when the search button B1 of the case selection cell K1 is selected in a case where the case check box K4 is unchecked, the case content display control unit 102c refers to the case master table T5 and displays all cases registered in the case master table T5 on the application input screen P1. Specifically, the case content display control unit 102c displays "XX Holdings", "☆☆ Real Estate", and "□□ Construction" on the application input screen P1. In this case, the case content display control unit 102c may highlight the case selected by the user by highlighting or the like. This allows the user to select a desired case from the cases displayed using the mouse 112.

[0045] Returning to FIG. 11, the description of step S104 and subsequent steps will be continued. In step S104, the work content display control unit 102d refers to the employee master 106a and the work content master 106f, and displays, on the application input screen P1, work contents according to the employee group in a selectable manner.

[0046] FIG. 15 is a diagram showing an example of the display transition of the work contents by the work content display control unit 102d. As shown in FIG. 15, when the search button B2 of the work content selection cell K2 is selected, the work content display control unit 102d refers to the employee master table T1 and the work content master table T7, and displays all the work contents of the employee group "G1" linked to the logged-in employee CD "P001" (see area R1) on the application input screen P1. Specifically, the work content display control unit 102d displays the work contents "10000 Program delivery", "20000 Data investigation", and "30000 Data correction" on the application input screen P1. In this case, the work content display control unit 102d may highlight the case selected by the user by highlighting or the like. This allows the user to select the desired work content from the work contents displayed using the mouse 112.

[0047] Returning to FIG. 11, the description of step S105 and subsequent steps will be continued. In step S105, the judgment unit 102f judges whether the user has pressed the connection target display button B10 after inputting predetermined contents into the case selection cell K1, the work content selection cell K2, and the scheduled connection date and time input cell K3 by operating the mouse 112 or the like.

[0048] Fig. 16 is a diagram showing an example of a display transition in a state in which a predetermined content is input by a user operation. As shown in Fig. 16, after the user inputs predetermined content into each of the case selection cell K1, the work content selection cell K2, and the scheduled connection date and time input cell K3 by operating the mouse 112 or the like, it is determined whether or not the connection target display button B10 is pressed. If the determination unit 102f determines that the connection target display button B10 has been pressed (step S105: Yes), the authority management device 100 proceeds to step S106, which will be described later. On the other hand, if the determination unit 102f determines that the connection target display button B10 has not been pressed (step S105: No), the authority management device 100 returns to the above-mentioned step S103.

[0049] In step S106, the authority selection screen display control unit 102e displays the authority matrix in the authority matrix area M1 on the application input screen P1. In the embodiment, the authority matrix area M1 corresponds to the authority selection area.

[0050] Fig. 17 is a diagram showing an example of the display transition of the authority matrix area M1 by the authority selection screen display control unit 102e. As shown in Fig. 17, the authority selection screen display control unit 102e refers to the case person master table T6, the work content master table T7, the server master table T8, and the connection account master table T9, and displays the items of the authority matrix for setting the authority of the connection account for each server in the authority matrix area M1 on the application input screen P1.

[0051] Specifically, the authority selection screen display control unit 102e first refers to the case-person master table T6, and displays in the authority matrix area M1 the case name corresponding to the case CD entered in the case selection cell K1.

[0052] Next, the authority selection screen display control unit 102e refers to the server master table T8 and displays the server names and roles corresponding to the case CD in the authority matrix area M1.

[0053] Furthermore, the authority selection screen display control unit 102e refers to the task content master table T7 and the parameter master table T4 (see FIG. 12 or FIG. 5), acquires the matrix item names, and displays them in the authority matrix area M1.

[0054] Finally, the authority selection screen display control unit 102e refers to the work content master table T7 and the connection account master table T9, obtains the authority corresponding to the work content CD entered in the work content selection cell K2 and its initial setting value, and displays them in the authority matrix area M1.

[0055] As shown in FIG. 17, the authority selection screen display control unit 102e displays the setting value 1 of the work content master table T7 in the first column, the setting value 2 of the work content master table T7 in the second column, and the setting value 3 of the work content master table T7 in the third column. In this case, the authority selection screen display control unit 102e displays according to the status state of each setting value in the work content master table T7. Specifically, when the authority selection screen display control unit 102e cannot be used, it displays the unavailable authority matrix items in an unselectable state (locked state) and cannot be selected by the user. Furthermore, when the authority selection screen display control unit 102e recommends use, it displays the authority matrix items in a selected state and displays them in a state where they can be arbitrarily selected by the user's operation. Furthermore, when the authority selection screen display control unit 102e can be used, it displays the authority matrix items in an unselected state and displays them in a state where they can be arbitrarily selected by the user's operation. This allows the user to intuitively grasp the selectable items.

[0056] Returning to FIG. 11, the description of step S107 and subsequent steps will be continued. In step S107, the determination unit 102f determines whether or not the registration button B20 has been pressed.

[0057] Fig. 18 is a diagram showing an example of a selection result in which the user selects each item of the authority matrix in the authority matrix area M1. As shown in Fig. 18, the determination unit 102f determines whether or not the user operates the mouse 112 to press the registration button B20. If the determination unit 102f determines that the registration button B20 has been pressed (step S107: Yes), the authority management device 100 proceeds to step S108, which will be described later. On the other hand, if the determination unit 102f determines that the registration button B20 has not been pressed (step S107: No), the authority management device 100 returns to step S106.

[0058] In step S108, the generation unit 102g generates registration data according to the authority matrix when the registration button B20 is pressed.

[0059] Fig. 19 is a diagram showing a schematic diagram of the selection status Q1 in Fig. 18. Fig. 20 is a diagram showing an example of registered data. In Fig. 19, a cell with coarse hatching indicates that it cannot be selected, a cell with fine hatching indicates that it is selected, and a cell with no hatching indicates that it is not selected.

[0060] As shown in Figures 19 and 20, the generating unit 102g obtains a combination table T10 of the server to which the application is made and the connection account, and generates registration data D1 in which the application number is associated with the case CD, the work content CD, the scheduled connection date and time, and linking information linking the server name and the user account ID based on this combination table T10. After step S108, the authority management device 100 ends this process. The generating unit 102g may display the registration data D1 on the monitor 114, or may output it to an external server or the PC of the approver via the communication interface unit 104.

[0061] Fig. 21 is a diagram showing a remote connection status before approval. Fig. 22 is a diagram showing a remote connection status after approval. As shown in Figs. 21 and 22, after approval is completed by the authority management device 100, the user can remotely connect to the approved server and connection account within the scheduled connection time. Specifically, the user can remotely connect to the a100001 server as User01, can remotely connect to the a100002 server as User03, and can remotely connect to the a100003 server as User03.

[0062] According to the embodiment described above, the generation unit 102g generates registration data D1 in which an application number is associated with a case code, a work content code, a scheduled connection date and time, a server name, and user account identification information based on a user's selection operation for each item of the authority matrix in the authority matrix area M1 through a user's selection operation, so that the user can select a connection account according to the work content with a simple operation and submit an application.

[0063] Furthermore, according to the embodiment, when the user selects the search button B1 of the case selection cell K1 using the mouse 112, the case content display control unit 102c displays the cases in charge according to the employee CD in a selectable manner, so that the user can easily select the desired case from the cases that can be handled and displayed using the mouse 112.

[0064] Furthermore, according to the embodiment, the work content display control unit 102d refers to the employee master 106a and the work content master 106f, and displays work content corresponding to the employee group on the application input screen P1 in a selectable manner, so that the user can select the desired work content from the displayed work contents using the mouse 112.

[0065] Furthermore, according to the embodiment, when the handled case check box K4 is checked and the search button B1 of the case selection cell K1 is selected, the case content display control unit 102c refers to the employee master table T1, the case master table T5 and the case responsible master table T6, and displays only the cases that the logged-in employee CD is responsible for on the application input screen P1, so that the user can easily select the desired case from the available cases displayed using the mouse 112.

[0066] Furthermore, according to the embodiment, the authority selection screen display control unit 102e refers to the work content master table T7 and the connection account master table T9, obtains the authority corresponding to the work content CD entered in the work content selection cell K2 and its initial setting value, and displays them in the authority matrix area M1, so that the user can intuitively understand the selectable items.

[0067] Furthermore, according to the embodiment, when the authority selection screen display control unit 102e is unavailable, the unavailable authority matrix items are displayed in an unselectable state (locked state), when usage is recommended, the authority matrix items are displayed in a selected state and are displayed in a state where they can be arbitrarily selected by user operation, and when available, the authority matrix items are displayed in an unselected state and are displayed in a state where they can be arbitrarily selected by user operation, so that the user can intuitively grasp the selectable items.

[0068] Furthermore, according to the embodiment, the generating unit 102g outputs the registration data D1 to the outside, so that the approver can easily check the application contents.

[0069] [3. Contribution to the United Nations-led Sustainable Development Goals (SDGs)] This embodiment can contribute to improving business efficiency and promoting appropriate management decisions by companies, thereby contributing to goals 8 and 9 of the SDGs.

[0070] Furthermore, this embodiment can contribute to reducing waste and promoting paperless and electronic systems, thereby contributing to the achievement of SDGs Goals 12, 13, and 15.

[0071] Furthermore, this embodiment can contribute to strengthening control and governance, making it possible to contribute to Goal 16 of the SDGs.

[0072] [4. Other embodiments] The present invention may be embodied in various different embodiments other than those described above within the scope of the technical concept set forth in the claims.

[0073] For example, among the processes described in the embodiments, all or part of the processes described as being performed automatically can be performed manually, or all or part of the processes described as being performed manually can be performed automatically using known methods.

[0074] In addition, the processing procedures, control procedures, specific names, information including parameters such as registered data and search conditions for each process, screen examples, and database configurations shown in this specification and drawings may be changed as desired unless otherwise specified.

[0075] Moreover, with regard to the right management device 100, each of the components shown in the figure is merely a functional concept, and the device does not necessarily have to be physically configured as shown in the figure.

[0076] For example, the processing functions of the authority management device 100, particularly the processing functions performed by the control unit, may be realized in whole or in part by a CPU and a program interpreted and executed by the CPU, or may be realized as hardware using wired logic. The program is recorded in a non-transient computer-readable recording medium that includes programmed instructions for causing the information processing device to execute the processes described in this embodiment, and is mechanically read by the authority management device 100 as necessary. That is, a computer program for giving instructions to the CPU in cooperation with the OS and performing various processes is recorded in a storage unit such as a ROM or HDD (Hard Disk Drive). This computer program is executed by being loaded into a RAM, and cooperates with the CPU to form a control unit.

[0077] In addition, this computer program may be stored in an application program server connected to the right management device 100 via any network, and it is also possible to download all or part of it as necessary.

[0078] In addition, the program for executing the process described in this embodiment may be stored in a non-transient computer-readable recording medium, or may be configured as a program product. Here, the "recording medium" includes any "portable physical medium" such as a memory card, a Universal Serial Bus (USB) memory, a Secure Digital (SD) card, a flexible disk, a magneto-optical disk, a ROM, an Erasable Programmable Read Only Memory (EPROM), an Electrically Erasable and Programmable Read Only Memory (EEPROM (registered trademark)), a Compact Disk Read Only Memory (CD-ROM), a Magneto-Optical disk (MO), a Digital Versatile Disk (DVD), and a Blu-ray (registered trademark) Disc.

[0079] Moreover, a "program" is a data processing method written in any language or description method, and may be in any form, such as source code or binary code. Note that a "program" is not necessarily limited to a single configuration, but also includes a distributed configuration as multiple modules or libraries, and a program that works with a separate program, such as an OS, to achieve its function. Note that the specific configuration and reading procedure for reading a recording medium in each device shown in the embodiments, as well as the installation procedure after reading, may use well-known configurations and procedures.

[0080] The various databases etc. stored in the memory unit are storage means such as memory devices such as RAM and ROM, fixed disk devices such as hard disks, flexible disks, and optical disks, and store various programs, tables, databases, and web page files etc. used for various processes and providing websites.

[0081] The right management device 100 may be configured as an information processing device such as a known personal computer or a workstation, or may be configured as the information processing device to which any peripheral device is connected. The right management device 100 may be realized by installing software (including programs or data, etc.) that causes the device to realize the processing described in this embodiment.

[0082] Furthermore, the specific form of distribution and integration of the devices is not limited to that shown in the drawings, and all or part of them can be functionally or physically distributed and integrated in any unit according to various additions or functional loads. In other words, the above-mentioned embodiments can be implemented in any combination, or the embodiments can be implemented selectively. [Industrial Applicability]

[0083] The present invention is useful in industries that perform credit and debenture management. [Explanation of symbols]

[0084] 100 Authority Management Device 102 Control section 102a Acquisition Department 102b Application input screen display section 102c Case content display control unit 102d Work content display control unit 102e Authority selection screen display control unit 102f Judgment section 102g generation part 104 Communication interface section 106 Storage section 106a Employee Master 106b Display setting master 106c Parameter Master 106d Project Master 106e Case Manager Master 106f Work content master 106g Server Master 106h Connection account master 108 Input / Output Interface Section 112 Input Devices 114 Output Device 200 Servers 300 Network

Claims

1. A rights management device including a control unit, Employee master that associates employee names and employee groups with employee codes, A display setting master that associates role display settings with employee groups; A parameter master in which a key code is associated with a setting value and each authority level; A master of case staff that associates case codes with employee codes, A case master that maps case names to case codes, A work content master in which setting information that assigns work authority to each work group, work content, and setting value is associated with the work content code; A server master that associates server names with roles and case codes, A connection account master that associates a server name with a user account and a setting value, is accessible to The control unit is an acquisition unit for acquiring an employee code of an employee who has logged in to the authority management device; an application input screen display control unit that references the employee master, the display setting master, the parameter master, the case person in charge master, the case master, and the work content master, and displays on a display unit an application input screen having a case input item capable of selecting at least one case that the employee code acquired by the acquisition unit can be responsible for, a work input item capable of selecting at least one work content that a group linked to the employee code acquired by the acquisition unit can be responsible for, a scheduled connection date and time input item capable of inputting a scheduled connection date and time, and an authority selection area for setting the authority of the connection account for each server; an authority selection screen display control unit that references the case master, the server master, the work content master, and the connection account master, and displays in the authority selection area an authority matrix in which authority of the connection account for each server can be set for each case code based on the case code input in the case input field, the work content input in the work input field, and the scheduled work date and time input in the scheduled connection date and time input field; a generation unit that generates registration data in which a case code, a work content code, a scheduled connection date and time, a server name, and a user account identification information are associated with an application number based on a user's selection operation for each item of the authority matrix in the authority selection area; To have An authority management device comprising:

2. 2. The rights management device according to claim 1, The control unit is a case content display control unit that, when the case input item is selected by a user's selection operation, references the case master, the employee master, and the case-person-in-charge master, and displays at least one case that can be handled according to the employee code acquired by the acquisition unit; a work content display control unit that, when the work input item is selected by a user's selection operation, refers to the employee master and the work content master, and displays at least one work content that can be handled by a group linked to the employee code acquired by the acquisition unit; and An authority management device comprising:

3. 3. The rights management device according to claim 2, The application input screen is Further, the device has an input section for inputting an instruction to display only the cases in charge, The case content display control unit, When the input unit for assigned cases is instructed to display only the assigned cases, only the assigned cases that can be handled according to the employee code acquired by the acquisition unit are displayed, displaying all cases registered in the case master when the in-charge case input unit does not instruct the in-charge case input unit to display only the in-charge case; An authority management device comprising:

4. 4. The rights management device according to claim 3, The authority selection screen display control unit, Displaying initial setting values ​​for each item of an authority matrix for setting the authority of a connection account for each server for each case code by referring to the work content master; An authority management device comprising:

5. 5. The rights management device according to claim 4, The authority selection screen display control unit, Referring to the work content master, displaying unavailable permission matrix items in an unselectable state, displaying recommended permission matrix items in a selected state, and displaying available permission matrix items in a non-selected state; An authority management device comprising:

6. 6. The rights management device according to claim 5, The generation unit is outputting the registration data; An authority management device comprising:

7. A rights management method executed by a rights management device having a control unit, The right management device includes: Employee master that associates employee names and employee groups with employee codes, A display setting master that associates role display settings with employee groups; A parameter master in which a key code is associated with a setting value and each authority level; A master of case staff that associates case codes with employee codes, A case master that maps case names to case codes, A work content master in which setting information that assigns work authority to each work group, work content, and setting value is associated with the work content code; A server master that associates server names with roles and case codes, A connection account master that associates a server name with a user account and a setting value, is accessible to Executed by the control unit, an acquisition step of acquiring an employee code of an employee who has logged in to the authority management device; an application input screen display control step of displaying on a display unit an application input screen having a case input item capable of selecting at least one case that the employee code acquired in the acquisition step can handle, a work input item capable of selecting at least one work content that a group linked to the employee code acquired in the acquisition step can handle, a scheduled connection date and time input item capable of inputting a scheduled connection date and time, and an authority selection area for setting the authority of the connection account for each server, by referring to the employee master, the display setting master, the parameter master, the case person in charge master, the case master, and the work content master; an authority selection screen display control step of displaying, in the authority selection area, an authority matrix capable of setting the authority of a connection account for each server for each case code based on the case code input in the case input field, the work content input in the work input field, and the scheduled work date and time input in the scheduled connection date and time input field, by referring to the case master, the server master, the work content master, and the connection account master; a generation step of generating registration data in which a case code, a work content code, a scheduled connection date and time, a server name, and a user account identification information are associated with an application number based on a user's selection operation for each item of the authority matrix in the authority selection area; containing, 2. An authority management method comprising:

8. A right management program to be executed by a right management device having a control unit, The right management device includes: An employee master that associates employee codes with employee names and employee groups, A display setting master that associates role display settings with employee groups; A parameter master in which a key code is associated with a setting value and each authority level; A master of case staff that associates case codes with employee codes, A case master that maps case names to case codes, A work content master in which setting information that assigns work authority to each work group, work content, and setting value is associated with the work content code; A server master that associates server names with roles and case codes, A connection account master that associates a server name with a user account and a setting value, is accessible to To cause the control unit to execute An acquisition step of acquiring an employee code that has logged in to the authority management device; an application input screen display control step of displaying on a display unit an application input screen having a case input item capable of selecting at least one case that the employee code acquired in the acquisition step can handle, a work input item capable of selecting at least one work content that a group linked to the employee code acquired in the acquisition step can handle, a scheduled connection date and time input item capable of inputting a scheduled connection date and time, and an authority selection area for setting the authority of the connection account for each server, by referring to the employee master, the display setting master, the parameter master, the case person in charge master, the case master, and the work content master; an authority selection screen display control step of displaying, in the authority selection area, an authority matrix capable of setting the authority of a connection account for each server for each case code based on the case code input in the case input field, the work content input in the work input field, and the scheduled work date and time input in the scheduled connection date and time input field, by referring to the case master, the server master, the work content master, and the connection account master; a generation step of generating registration data in which a case code, a work content code, a scheduled connection date and time, a server name, and a user account identification information are associated with an application number based on a user's selection operation for each item of the authority matrix in the authority selection area; containing, A permission management program that features:

Images