International Business Machines Corporation

Todd D Jordan

David Gerard Kuehr-McLaren

Magesh Rajamani

Oriana Jeannette Love

David Walsh Palmieri

Jeffrey Tobias Robke

Luis B Casco-Arias Sanchez

Chrystian L Plachco

Mechanisms are provided for performing a role engineering project for applying security roles to access operations targeting resources. A plurality of data objects representing one or more user identities, permissions, and resources of an organization computing system are received. One or more filter criteria for filtering the plurality of data objects to generate a subset of data objects for consideration during the role engineering project are received. The one or more filter criteria specify a scope of the role engineering project. The one or more filter criteria are applied to generate the subset of data objects. Role engineering project operations are performed on the subset of data objects to generate one or more security roles. The one or more security roles are deployed to the organization computing system to control access operations targeting resources of the organization computing system.

Role engineering scoping and management

Growing community of inventors

Raleigh, NC, United States of America

Todd D Jordan