Microsoft Technology Licensing, LLC

Thomas Keane

Pradeep Ayyappan Nair

Ramnath Prasad

Albert Gordon Greenberg

David A Maltz

Vitaly Voloshin

Parvez Anandam

Chetan S Shankar

Sandeep Kalarickal

Marisol Ontaneda

Pavan Gopal Bandla

Thomas Charles Knudson

Casey McKinnon

Chi Zhou

Veena Ramachandran

Ranajoy Sanyal

Qingsu Wu

Ashvinkumar J Sanghvi

Lihua Yuan

Travis Austin Wright

Ferit Findik

Jens K Jacobsen

Nigel Graham Cain

Baelson B Duque

Kristoffer S Schultz

Chandika Bhandari

Doug Kirschner

Ryan Meyer

Thomas N Martino

Eric Benjamin Watson

Vij Rajarajan

Shawn Bice

Mai-Ian Tomsen Bukovec

Eric C Kool-Brown

Rashid Michael Aga

Vlad Joanovic

Sandeep Koushik Sheshadri

Vladimir Joanovic

Deepal Jayasinghe

Shikhar Suri

Sharda Murthi

Percy Fitter

Mark Hennessy

Mohammad Qudeisat

George Chen

Network management of cloud computing environments subject to different data control policies is standardized in a manner that ensures compliance with the data control policies. An execution service remote from a cloud computing environment being managed implements workflows to manage different aspects of the cloud computing environment, including monitoring, incident management, deployment, and/or buildout. The execution service issues requests to perform management actions for network devices in the cloud computing environment. A device access service in the cloud computing environments receives the requests, and, in response to the requests, the device access service obtains access control data to access the network devices and perform the requested management actions for the network devices.

Standardization of network management across cloud computing environments and data control policies

A JIT service in a cloud computing environment manages just-in-time access to resources in the cloud computing environment for an external device. When JIT access to a resource is requested by a device, the JIT service retrieves a JIT policy for the resource that includes geolocation criteria limiting the geolocation from which JIT access can be automatically granted. The geolocation of the device is evaluated against the geolocation criteria. If the geolocation criteria and any other criteria of the JIT policy are satisfied, the JIT service provisions JIT access to the resource for the device.

Just-in-time access based on geolocation to maintain control of restricted data in cloud computing environments

A JIT service in a cloud computing environment manages just-in-time access to resources in the cloud computing environment for an external device. When JIT access to a resource is requested by a device, the JIT service retrieves a JIT policy for the resource that includes screening criteria limiting automatic granting of JIT access to users who meet the screening criteria. Screening information for a user associated with the request is evaluated against one or more screening requirements set forth by the screening criteria. If the screening criteria and any other criteria of the JIT policy are satisfied, the JIT service provisions JIT access to the resource for the device.

Just-in-time access based on screening criteria to maintain control of restricted data in cloud computing environments

Network buildout of cloud computing environments subject to different data control policies is performed in a manner that ensures compliance with the data control policies. A buildout service is located in a remote cloud computing environment separate from the cloud computing environments at which buildout is being performed. The buildout service implements workflows to manage different aspects of network buildout in the cloud computing environments. The buildout service does not have access to restricted data in the cloud computing environments, including access control data, such that the buildout service cannot directly interact with network devices. The buildout service issues requests for device configuration to hardware proxies in the cloud computing environments. In response to the requests, the hardware proxies obtain access control data to access and configure the network devices.

Network buildout for cloud computing environments with data control policies

Network management of cloud computing environments subject to different data control policies is standardized in a manner that ensures compliance with the data control policies. Executions services and source of truth services are located in a remote cloud computing environment separate from the cloud computing environments being managed. The execution services implement workflows to manage different aspects of the cloud computing environments, including monitoring, incident management, deployment, and buildout. The source of truth services provide network configuration information for the cloud computing environments to allow automated operation of the execution services. The execution services issue requests for management operations to device access services in the cloud computing environments. In response to the requests, the device access services obtain access control data to access the network devices and perform the management operations.

Monitoring of cloud computing environments subject to different data control policies is performed in a manner that ensures compliance with the data control policies. A monitoring service is located in a remote cloud computing environment separate from the cloud computing environments being monitored. The monitoring service does not have access to restricted data in the cloud computing environments, including access control data, such that the monitoring service cannot directly interact with network devices. The monitoring service issues requests for monitoring data to device access services in the cloud computing environments. In response to the requests, the device access services obtain access control data to access the network devices and obtain the requested data, which is returned to the monitoring service.

Monitoring cloud computing environments with data control policies

A JIT service in a cloud computing environment manages just-in-time access to resources in the cloud computing environment for DevOps personnel who do not have persistent access to restricted data or the ability to modify the cloud computing environment to gain access to restricted data. When JIT access to a resource is requested by a DevOps device, the JIT service retrieves a JIT policy for the resource that includes screening criteria limiting automatic granting of JIT access to DevOps personnel who meeting the screening criteria. Screening information for the DevOps personnel is evaluated against one or more screening requirements set forth by the screening criteria. If the screening criteria and any other criteria of the JIT policy are satisfied, the JIT service provisions JIT access to the resource for the DevOps device.

A JIT service in a cloud computing environment manages just-in-time access to resources in the cloud computing environment for DevOps personnel who do not have persistent access to restricted data or the ability to modify the cloud computing environment to gain access to restricted data. When JIT access to a resource is requested by a DevOps device, the JIT service retrieves a JIT policy for the resource that includes geolocation criteria limiting the geolocation from which JIT access can be automatically granted. The geolocation of the DevOps device is evaluated against the geolocation criteria. If the geolocation criteria and any other criteria of the JIT policy are satisfied, the JIT service provisions JIT access to the resource for the DevOps device.

The described unified service management system provides a unified console to perform functions of individual management specialists. A unified console facilitates an administrator to perform the complex tasks that were performed by the individual management specialists. The unified console provides a 'wizard' based approach to the administrator to design all aspects of the complex tasks including placement of components or computing devices, deciding on policies of the components or computing devices, deciding on health policies of components or computing devices, fixing data protection policies of components or computing devices, etc.

Unified service management

In a server cluster, multiple nodes may host one or more virtual servers. Virtual servers that may be hosted by particular nodes are identified. From the nodes, status is provided as to nodes that are actively hosting virtual servers and status of nodes whether they are actively hosting or not hosting a virtual server. Failover events are indicated, including transition of a virtual server from a failed node to another node.

Discovering and monitoring server clusters

A change management system may use a phased status indicator that may illustrate several phases of a change request and a current status for each phase of a change management lifecycle. Additionally, a group of change requests may be displayed in a linked manner showing various relationships between change requests. The status indicator and linked display may be used together or separately to illustrate the status of various change requests and within interactive displays of change request data.

Visualizers for change management system

Processes and techniques for tailoring operations management in a system are described. The processes and techniques allow a user to customize operations management based on the user's function within a system and the particular tasks that the user wishes to accomplish. Simplified user interfaces can be created by scoping the interfaces based on user profiles, preferences and system components.

Tailored system management interface

Growing community of inventors

Seattle, WA, United States of America

Thomas Keane