International Business Machines Corporation

Brian A Stube

David Gerard Kuehr-McLaren

Hari Shankar

Govindaraj Sampathkumar

Pratik Gupta

Vincent C Williams

Sumit Taank

Sharon L Cutcher

Policies defining the entitlements to be assigned to a new identity joining a role are automatically generated. An automatic policy assigns a new identity the entitlements commonly owned by a predetermined number of identities in the role, which may be all of the role identities. A conditional policy recommends that a new identity be assigned the non-commonly-owned entitlements associated with the role identity whose non-entitlement attributes most closely match the non-entitlement attributes of the new identity. This may be automatically determined by iterating through a vector that maps the non-commonly-owned entitlements with the non-entitlement attributes of each role identity, comparing the non-entitlement attributes of the new identity to find the closest match. The non-commonly-owned entitlements of that identity are then recommended to be assigned to the new identity, upon approval.

Automatic policy generation based on role entitlements and identity attributes

Growing community of inventors

Cambridge, MA, United States of America

Brian A Stube