Web-Based Role Assignment System for Enterprise Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing role assignment processes in enterprises are inefficient and prone to errors due to centralized or decentralized approval schemes, leading to delays, confusion, and inappropriate approvals or denials, especially when multiple individuals and steps are involved in processing requests.
Innovation Solution
A web-based system that allows requesters to select and submit role assignment requests directly to authorized administrators through a networked computer system, with automated approval and documentation, ensuring that only authorized administrators familiar with the roles and personnel within their work group can approve or deny requests, thereby streamlining the process.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If a centralized role assignment scheme is used, then the number of administrators is reduced, but the processing efficiency and accuracy of role assignment requests deteriorate
Solution Approach 1:
The patent divides the centralized administrator role into multiple work group administrators, each responsible for specific work groups. This segmentation allows parallel processing of role assignment requests across different work groups, improving overall processing efficiency while maintaining manageable complexity through clear division of responsibilities.
Solution Approach 2:
The patent introduces a new dimension of organization by work groups, transforming the flat centralized structure into a hierarchical structure with multiple levels (enterprise level and work group level). This dimensional change enables simultaneous local decision-making at work group level while maintaining enterprise-wide coordination.
2Loss of information
If a decentralized role assignment scheme is used, then the knowledge of roles and individuals is improved, but the processing delays and priority issues worsen
Solution Approach 1:
The patent establishes role assignment requests as formal items on administrators' agendas with predetermined review times. This preliminary structuring of the approval process ensures that role assignment requests receive dedicated attention at scheduled intervals, preventing indefinite delays while maintaining the benefits of decentralized knowledge.
Solution Approach 2:
The patent creates a feedback loop where role assignment requests are tracked through the system, with automated notifications and status updates. This feedback mechanism ensures that requests are not lost or forgotten, and administrators can systematically review and act on them during scheduled agenda items.
3Reliability
If multiple individuals are involved in processing role assignment requests, then the comprehensive review is improved, but the confusion and inappropriate approvals worsen
Solution Approach 1:
The patent segments the approval authority by work group, assigning each work group administrator responsibility for specific work groups. This creates clear boundaries of authority and responsibility, eliminating confusion about who should approve which requests while maintaining comprehensive review within each work group's context.
Solution Approach 2:
The patent applies local quality by allowing different work group administrators to handle different types of role assignment requests based on their specific knowledge of their work groups. Each administrator applies their local expertise to make context-appropriate approval decisions, improving both reliability and operational clarity.
Data Source
AI summary
A method and system for assigning a role within an enterprise. The method and system can include a requester selecting a role to which he wishes to be assigned, selecting an administrator authorized to grant the selected role, and submitting a request for the selected role to the selected administrator. The administrator can then approve or deny the request. These actions can be done in a web-based computer program. The selection of the role or the administrator can be made from a list of one or more roles or administrators available to the requester. The submittal of the request can be done by the interaction of the web-based computer program with an e-mail program. Records of the submittal of the request and of the approval or denial of the request can be maintained in an archive data store coupled to the web-based computer program.