ROLE-BASED ACCESS CONTROL POLICY AUTO GENERATION

The invention relates to role-based access control policy auto generation. In some examples, an access control policy controller in a computer network may receive a request to create an access control policy that permits a role to perform one or more functions in the computer network. The access control policy controller may determine one or more operations performed on one or more objects in the computer network to perform the one or more functions based at least in part on tracking performance of the one or more functions in the computer network. The access control policy controller may create the access control policy for the role that permits the role to perform the one or more operations on the one or more objects in the computer network. 本公开涉及基于角色的访问控制策略自动生成。在一些实例中，计算机网络中的访问控制策略控制器可接收创建访问控制策略的请求，该访问控制策略允许角色执行计算机网络中的一个或多个功能。访问控制策略控制器可至少部分基于跟踪计算机网络中的一个或多个功能的执行，来确定对计算机网络中的一个或多个对象执行的以执行一个或多个功能的一个或多个操作。访问控制策略控制器可创建用于角色的访问控制策略，该访问控制策略允许角色对计算机网络中的一个或多个对象执行一个或多个操作。