Dynamic Group Rule Validation via Subgroup Analysis

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The process of defining and deploying dynamic group rules in large organizations is inefficient due to exhaustive parsing of entire user directories, which is time-consuming and resource-intensive, and prone to errors that are only revealed after deployment, causing disruptions and unnecessary resource usage.

Innovation Solution

A method for selective validation of administrator-defined subgroups against group rule parameters, allowing for the generation of a subgroup validation report to confirm the efficacy of group rule parameters before full deployment, reducing the need for exhaustive parsing and minimizing resource usage.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If exhaustive parsing of the entire user directory is performed to validate group rule parameters, then complete accuracy of group membership is ensured, but computing resource usage and processing time increase significantly

Engineering Contradiction:
Improvegroup membership accuracyVSAvoidcomputing resource usage
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The patent segments the user directory into multiple partitions and processes each partition independently and in parallel. This allows the exhaustive parsing to be distributed across multiple computing resources, reducing the processing burden on any single resource while maintaining complete accuracy of group membership determination.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent performs preliminary filtering by identifying candidate users who may match the group rule parameters before conducting the full exhaustive parsing. This preliminary action reduces the scope of the subsequent comprehensive validation, thereby reducing computing resource usage while ensuring that no potential matches are missed.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If exhaustive parsing is performed multiple times during group rule parameter refinement, then errors are eventually detected, but processing time and resource waste increase

Engineering Contradiction:
Improveerror detection capabilityVSAvoidparameter refinement time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system performs preliminary validation checks on group rule parameters using a subset of user data before final deployment. This allows errors to be detected early in the parameter refinement process without requiring multiple complete exhaustive parses, thereby reducing the time and resources wasted during iterative parameter development.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent implements a feedback mechanism where results from partial parsing are used to validate group rule parameters incrementally. This allows administrators to receive feedback on parameter correctness during the refinement process itself, rather than waiting until after complete parsing and deployment, thus reducing iterative re-parsing requirements.

Inventive Principle:
Principle #23Feedback

3Measurement precision

If manual user identification and group population is performed, then group rule accuracy can be verified, but administrative labor and time requirements increase

Engineering Contradiction:
Improvegroup membership verification accuracyVSAvoidadministrative effort
Core Design Contradiction:
Measurement precisionVSEase of operation

Solution Approach 1:

The patent enables the system to automatically validate group rule parameters against user directory data without requiring manual administrative intervention. The system performs self-verification by comparing computed group memberships against expected results, thereby eliminating the need for administrators to manually identify and verify each user while maintaining high accuracy.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The system provides automated feedback to administrators regarding the accuracy of group rule parameters by comparing computed results against validation criteria. This feedback mechanism replaces manual verification efforts, allowing administrators to confirm group membership accuracy without directly examining individual user assignments.

Inventive Principle:
Principle #23Feedback

Data Source

PatentUS11165785B1Validation of user subgroups against directory attributes for dynamic group rules
Publication Date: 2021.11.02 MICROSOFT TECHNOLOGY LICENSING LLC
  • US11165785B1 patent drawing
  • US11165785B1 patent drawing
  • US11165785B1 patent drawing

AI summary

Selective validation of subgroups of users against group rule parameters is performed to validate group rule parameters for a dynamic group rule. An administrator defines the group rule parameters and selects individual user accounts which are either expected to be included within and/or excluded from a full membership list for the dynamic group rule. For example, the administrator may select first user accounts that are expected to be included within the full membership list and/or second user accounts that are expected to be excluded from the full membership list. Then, a subgroup validation report is generated to inform the administrator whether or not individual user accounts from the subgroup of user accounts satisfy the group rule parameters and, therefore, will be included within the full membership list of the dynamic group rule. The subgroup validation report reveals the efficacy of the group rule parameters.