Shared Data Visualization Access via Service Account Credentials
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Modern businesses face challenges in accessing and sharing complex database query results due to the difficulty in constructing queries and the need for multiple credentials, which can be computationally and financially expensive, and identity provider implementations are cumbersome.
Innovation Solution
A system that uses a service account to generate data visualizations from a cloud-based data warehouse, allowing sharing of visualizations without requiring the receiving entity to have direct access to the underlying data, by associating the visualization with a service account that has broader access rights.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a service account with broader access rights is used to generate data visualizations, then sharing capability is improved, but security control is worsened
Solution Approach 1:
The patent introduces a service account as an intermediary credential that mediates between the data warehouse and the visualization sharing system. This service account has broad access rights to query any data in the warehouse, allowing the system to generate visualizations for any user without requiring the user to have direct database access. The service account acts as a mediator that translates user visualization requests into authenticated data queries, resolving the contradiction by enabling universal sharing while maintaining security through centralized credential management.
2Reliability
If multiple credentials are required for data access and visualization, then access control is improved, but system complexity is worsened
Solution Approach 1:
The patent implements a universal service account credential that serves multiple functions: it authenticates users who need to access the data warehouse, enables generation of data visualizations, and facilitates sharing of visualizations with users who lack direct database access. This single multi-functional credential eliminates the need for separate credentials for each function, reducing system complexity while maintaining robust access control through the centralized service account mechanism.
3Measurement precision
If frequent database requests are made for data visualizations, then data freshness is improved, but computational cost is worsened
Solution Approach 1:
The service account enables the visualization system to autonomously query the data warehouse on behalf of users without requiring users to manually construct complex SQL queries. The system self-services by automatically translating user-friendly visualization requests into optimized database queries using the service account's authenticated credentials, reducing the computational burden on users while maintaining data freshness through frequent automated requests.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Supplanting access credentials for shared data visualizations including receiving, from a first identity provider (IDP) account, a request to generate a data visualization utilizing restricted data from a cloud-based data warehouse, wherein the data visualization is generated by accessing the restricted data using the first IDP account; in response to receiving a request to share the data visualization with a receiving entity without access to the restricted data, associating, by a data visualizer, the data visualization with a service account with access to the restricted data, wherein the service account is not authenticated as a user of the first IDP account; and providing, by the data visualizer to the receiving entity, access to the data visualization including generating the data visualization by accessing, using the service account, the restricted data from the cloud-based data warehouse.