Microsoft Technology Licensing, LLC

Anand Madhava Menon

Liqiang Zhu

Rajalakshmi Dani

Yi Zeng

Siddhartha Mathur

Vikas Ahuja

Neil Shipp

Nick Voicu

David Hetherington

Jiahui Wang

Paul Howard Rich

Naveen Madan

Guanghui He

Zhaoan Liu

Gavin Ackroyd

Yu Huang

Yu (Kyle) Huang

Paul H Rich

Tenant approval for operator access to tenant data is provided. In order to grant service personnel operators access to a tenant's data for performing a requested action, a lockbox determines a security group role to which an operator needs to be elevated to perform a requested action, computes a set of internal administrators and tenant administrators authorized to grant a temporary role elevation, and sends an access control request to the administrators. Upon receiving approval of the access control request from an internal administrator and a tenant administrator, the lockbox elevates the operator to the security group role, granting the operator a set of permissions needed in order to allow the operator to perform the requested action. Accordingly, tenants are enabled to control access to their data and scrutinize access requests per their company procedures and compliance needs.

Tenant lockbox

When a user inputs an action request, such as a requested command, to be performed on a target machine, a management system receives the request and verifies it with a separate authentication and permission system. The verified command request is sent to the target machine. An authentication worker on the target machine accesses a set of policies, local to the target machine, to identify a least privileged execution environment in which the requested command can be performed. The authentication worker on the target machine launches the requested command within the identified least privileged execution environment on the target machine.

Security and permission architecture

Growing community of inventors

Redmond, WA, United States of America

Anand Madhava Menon