Microsoft Technology Licensing, LLC

Varsha Jayasimha

Robert Matthew Craig

William James Staples

Travis Austin Wright

Stephen L Rakonza

Mohit Srivastava

Richard A Ersek

Vitaly Voloshin

Brijesh D Bhatia

Lorenzo Rizzi

Ferit Findik

Markus Horstmann

Ian C Jirka

Murat Ersan

Abbot Moffat

Vlad Joanovic

Sandeep Phadke

Brett Eddy

An authorization system determines a user's permission to access an object implicitly based on relationships in a data-driven model. The system provides the ability to mark a relationship type in the model between one object class (accessor) and another object class (accessed) as an implicit authorization relationship type. A user can define the permissions granted to the accessor object on the accessed object. When an accessor object tries to access a related accessed object over an authorization relationship type, the authorization system determines the permissions granted by inspecting the implicit authorization relationship type definition. The authorization system can also traverse containment relationship types to grant objects permissions contained by other objects. The authorization system dynamically determines authorization based on a relationship model that more naturally fits the actions that an administrator of a data-driven system is familiar with, and does not involve complex direct authorization or group membership management.

Model-based implied authorization

Methods, systems, and computer program products for editing configuration data such that alterations in one representation of the configuration data are reflected in one or more other representations of the configuration data. The altered configuration data may take effect without having to restart a corresponding program module. Multiple alterations to the configuration data may be consolidated. A differencing operation may be used to identify an altered portion of the configuration data. For one or more altered portions, an 'updategram' may be generated and used to update a multiple program modules at various interconnected computer systems. A history of alterations to configuration data also may be maintained, making it possible to revert to an earlier version of the configuration data. Erroneous data may be ignored. Access to updated representations of the configuration data may be provided at a configuration management interface.

Dynamic metabase store

Discovery, maintenance, and representation of entities in a managed system environment are described. Apparatus described herein includes one or more agents that run on respective serves that are managed within a management system, and that generate discovery data in response to a discovery rule. The apparatus also includes a management server that is adapted to transmit the discovery rules for execution by the agent, and to receive the discovery data from the agent. Methods described herein include defining the rules for discovering data about an entity on the server, and receiving the discovery data in response to the rule being executed in an environment in which the entity is deployed. Several types of user interfaces for presenting the discovery data are also disclosed.

Discovery, maintenance, and representation of entities in a managed system environment

In a management system, a management server authorizes users to access computing devices based on class space and instance space. The management server further determines whether users are authorized to use particular computing devices and/or applications provided by the particular computing devices. Alerts may also be provided to the users by the management server.

Authorization over a distributed and partitioned management system

A method for installing and registering a COM component objects within a registration datastore of a computing system. The method comprising checking the COM component object to determine whether it contains a set of self-describing data, and if the COM component contains the set of self-describing data, perform a sequence of operations. These operations begin by extracting the self-describing data from the COM component. Next the operations register the COM component using the extracted self-describing data by storing registration data within the registration datastore. Finally the operations end after deriving additional registration data using the extracted self-describing data and storing the additional registration data within the registration datastore. The self-describing COM component comprises a first data field containing data representing a dynamic link library. A second data field derived from the first data field comprising a reserve word module. A third data field derived from the second data field comprising one or more self-describing component data elements. A fourth data field functioning to indicate the end of the self-describing COM component object, wherein the one or more self-describing component data elements are extracted by the system registrar module to generate data stored within the registration datastore.

Self-describing components within a software catalog

Growing community of inventors

Redmond, WA, United States of America

Varsha Jayasimha