Matrix Access Review for User Permission Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In large organizations, user permissions across multiple computing systems often become over-inclusive or under-inclusive as user roles change, leading to inefficiencies and security issues due to the complexity of managing permissions across immense user populations and numerous resources.
Innovation Solution
A computing platform that receives and processes data on user permissions across multiple systems, identifies user groups and shared permission sets, and generates graphical depictions to visualize access rights, allowing for effective matrix access reviews and management.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If traditional manual permission management methods are used across multiple computing systems, then flexibility in managing individual user permissions is maintained, but the complexity and time required to review and manage permissions across large user populations increases significantly
Solution Approach 1:
The patent combines permission data from multiple computing systems into a single consolidated graphical interface. The matrix view merges user groups, resources, and permission types across different systems, allowing administrators to review all permissions in one unified display rather than checking each system separately.
Solution Approach 2:
The patent segments the complex permission data into organized groups of users with common permission sets. By identifying and grouping users who share the same access patterns, the system divides the overwhelming task of reviewing individual user permissions into manageable segments that can be reviewed efficiently.
2Measurement precision
If detailed permission tracking is implemented for each user across all systems, then accuracy of access rights is improved, but the complexity of the permission management system increases
Solution Approach 1:
The system merges permission information from multiple computing systems into a single consolidated view. The graphical interface combines data about user groups, resources, and permission types across different systems, presenting a unified picture of access rights without requiring separate tracking mechanisms for each system.
Solution Approach 2:
The patent segments users into groups based on shared permission characteristics. By organizing users into groups that have common access rights to specific resources, the system reduces complexity while maintaining precise tracking of who has access to what, avoiding the need to manage individual user permissions separately.
3Reliability
If comprehensive permission data is collected from all computing systems, then completeness of access review is improved, but the difficulty of detecting and analyzing permission patterns increases
Solution Approach 1:
The system collects and merges permission data from multiple computing systems into a single graphical interface. The matrix view consolidates information about user groups, resources, and permission types across all systems, providing a complete picture of access rights in one unified display that is easy to analyze.
Solution Approach 2:
The patent segments the comprehensive permission data into organized groups of users with shared access patterns. By grouping users who have the same permissions to specific resources, the system makes it easier to detect patterns and anomalies in access rights while maintaining complete coverage of all permissions across all systems.
Data Source
AI summary
A computing platform may receive, from a plurality of computing systems, data identifying permissions of a plurality of users to access one or more resources of the plurality of computing systems. The computing platform may identify, from amongst the plurality of users, a plurality of groups of users. The computing platform may identify, from amongst the permissions, a plurality of sets of permissions. Each set of permissions may include permissions shared by each user of a group of users of the plurality of groups of users. The computing platform may generate a graphical depiction of the plurality of groups of users and the plurality of sets of permissions. The graphical depiction may graphically depict, for each group of the plurality of groups, one or more sets of permissions, of the plurality of sets of permissions, shared by each user of the group.