Accenture Global Solutions Limited

Accenture Global Services Gmbh

Gaurav Tandon

Sanjeev Shukla

Rexall E Thexton

Anthony McCoy

Qurrat Ul Ain

Andrew Poole

Colleen Connolly

Hannah Craddock

Farbod Kamiab

Sidath Mudiyanselage

Avinash Ramesh

Krishna Mohan Dasari

Alok Panda

Neha Joshi

David Michael Parker

Parvathy Ramakrishnan

Sayon Roy Choudhury

Piyush Jain

Anil Vilas Renuse

Om Bhallamudi

Catherine Marie-Luise Ploehn

Nick John Samuel Taylor

Chetan Kulshrestha

In some examples, active directory management and remediation may include obtaining data associated with active directories, and generating, based on the obtained data, a data model that includes a plurality of active directory concepts. A graph may be generated and include the active directory concepts as nodes and relationships between the nodes. The graph may be analyzed to identify user to group memberships. A membership score and a reasoning for the membership score may be determined for each identified user to group membership of the user to group memberships. The membership score and the reasoning for the membership score may be analyzed for each identified user to group membership. Further, based on the analysis of the membership score and the reasoning for the membership score, the at least one of the user to group memberships may be remediated.

Active directory management and remediation

In some examples, closed loop monitoring based privileged access control may include identifying a ticket that includes a specification of an incident that is to be remedied and determining an intent of the ticket. A privileged access command library may be analyzed to determine a plurality of privileged access steps that can be performed to remedy the incident. A source file associated with procedures that were performed to remedy the incident may be analyzed. A plurality of events may be identified using the source file and filtered based on the plurality of privileged access steps that can be performed to remedy the incident. At least one event that includes at least one other privileged access step that is not one of the plurality of privileged access steps that can be performed to remedy the incident may be identified, and instructions may be generated to remedy the identified event.

Closed loop monitoring based privileged access control

A method for controlling access to one or more of a plurality of target systems includes receiving profile data that defines one or more features associated with a plurality of individuals with one or more entitlements of those individuals. Each entitlement is indicative of target system access. The method further includes generating a model that relates the one or more features and the one or more entitlements of the plurality of individuals. Profile data that defines one or more features associated with a target individual is received from a first user management system. A listing that includes one or more entitlements associated with the target individual, and confidence values associated with the one or more entitlements is generated based on the profile data and the model. Each confidence value is indicative of whether the target individual should be granted a corresponding entitlement. For each entitlement having a corresponding confidence value higher than a predetermined threshold, an instruction is communicated to a target system associated with the entitlement to allow the target individual access to the target system.

System for controlling access to target systems and applications

System for controlling access to a plurality of target systems and applications

A method for controlling access to one or more of a plurality of target systems includes receiving profile data that defines one or more features associated with a plurality of individuals with one or more entitlements of those individuals. Each entitlement is indicative of target system access. The method further includes generating a model that includes one or more sets of rules where each set of rules is associated with an entitlement of the profile data. Each entitlement is indicative of target system/application access. Each rule within a set relates a combination of one or more features of the profile data with a confidence value. Profile data that defines one or more features associated with a target individual is received from a first user management system. A listing that includes one or more entitlements associated with the target individual, and confidence values associated with the one or more entitlements is generated based on the profile data and the rules. Each confidence value is indicative of whether the target individual should be granted a corresponding entitlement. For each entitlement having a corresponding confidence value higher than a predetermined threshold, an instruction is communicated to a target system associated with the entitlement to allow the target individual access to the target system.

An access management robot facilitation system facilitates a robot to execute access management tasks on a target system.

Integrated robotics and access management for target systems

Growing community of inventors

Wokingham, United Kingdom

Gaurav Tandon