Dell Products Inc.

Wenfeng Li

Michael G Varteresian

Muzhar S Khokhar

Donald Mace

Haijun Zhong

Jian Liu

Chen Liang

Shaojuan Lin

Eric O'callaghan

Stéphane Meng

An information handling system may include at least one processor and a memory. The information handling system may be configured to: receive, from a cloud management portal, a request to execute a management task, wherein the request includes information regarding a cloud identity associated with the request; determine a local identity that corresponds to the cloud identity; determine whether the local identity has sufficient privileges to execute the management task; and in response to a determination that the local identity does have sufficient privileges to execute the management task, cause the management task to be executed.

Role-based access control for cloud features

An information handling system may include at least one processor and a memory. The information handling system may be configured to: store a cryptographic lockbox that is secured by a set of secrets and that is accessible from a virtual machine, wherein the set of secrets comprises a first subset of one or more secrets based on a hardware environment of the information handling system and a second subset of one or more secrets based on a virtualized environment associated with the virtual machine; migrate the virtual machine to a different information handling system, wherein the migration is configured not to alter the second subset; and access the cryptographic lockbox from the migrated virtual machine.

Securing data for dynamic environment

Disclosed methods and systems for managing on-premises information handling resources establish, by an in-cloud web portal, an agentless connection to an on-premises information handling resource and perform, via the agentless connection, a configuration management operation to modify a configuration of the on-premises handling resource. Establishing the agentless connection and performing the configuration management operation may include one or more appropriate API calls. Disclosed teachings enable a web-accessible, public cloud portal to perform active configuration management of on-premises resources scattered across any number of distinct and potentially isolated customer sites without deploying and maintaining management agent software within the customer's private cloud. The on-premises resources may include a multi-node cluster provided by a node or nodes of one or more HCI appliances.

Centralized and agentless in-cloud management of on-premises resources

An information handling system may include at least one processor and a memory. The information handling system may be configured to determine names for a plurality of other information handling systems that are on-premises at a particular datacenter having a local network associated therewith; poll a selected subset of the plurality of other information handling systems via the local network; based on results of the polling, determine whether the information handling system is on-premises at the particular datacenter; and in response to a determination that the information handling system is on-premises at the particular datacenter, enable access to at least one sensitive administration operation associated with the particular datacenter.

Detection of on-premises systems

Methods and systems disclosed herein extend an entity's private cloud security model to the entity's public cloud. Public cloud access permissions are defined, in accordance with a security model implemented in the entity's private cloud, for one or more of the entity's public cloud resources. The public cloud permissions are pushed or otherwise provided to an access module within the private cloud. Upon receiving a request to access a public cloud resource, the private cloud access module is invoked to grant or deny the access request in accordance with the public cloud access permissions. Similarly, upon receiving a request to access a private cloud resource, the private cloud access module is invoked to process the access request in accordance with private cloud access permissions, thereby beneficially enabling users to interact with a single access interface regardless of whether the resource reside within the entity's cloud platform.

Extending private cloud security model to public cloud

A disclosed method for managing access control in cloud based environment with on-premises and off-premises access portals includes storing account mapping information, indicative of an association between on-premises accounts off-premises accounts, to a lockbox in each of the plurality of clusters and deploying an off-premises agent in each of the clusters. One or more of the clusters may exist within a hyper-converged infrastructure system. Each off-premises agent may be configured to retrieve cluster access information indicative of access permissions for the on-premises node cluster and upload the cluster access information to an off-premises access control service. The access permissions for the on-premises cluster and the off-premises access permissions may comprise role based access permissions. The off-premises access control service is coupled to an off-premises portal and enables the off-premises portal to switch its access control permissions between on-premises access permissions and off-premises permissions in accordance with the targeted resource.

Growing community of inventors

Shanghai, China

Wenfeng Li