ACCESS PRIVILEGE REMOVAL BASED ON EFFICIENT ACCESS PRIVILEGE USAGE MONITORING FOR DATA ENVIRONMENTS

The technology disclosed herein enables removal of unused access privileges for data environments based on usage. In a particular example, a method provides accessing audit logs for a plurality of data environments. The audit logs indicate which permissions were used for the plurality of data enviro...

Ausführliche Beschreibung

Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: Lu, Maohua, Whitcher, Robert, Thakur, Tarun
Format: Patent
Sprache:eng
Schlagworte:
Online-Zugang:Volltext bestellen
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
Beschreibung
Zusammenfassung:The technology disclosed herein enables removal of unused access privileges for data environments based on usage. In a particular example, a method provides accessing audit logs for a plurality of data environments. The audit logs indicate which permissions were used for the plurality of data environments during and corresponding times in which the permissions were used. The method also provides aggregating the permissions into timeframes based on the corresponding times and tracking, in a database, a number of times each of the permissions was used in each of the timeframes. In response a one of the permissions satisfying a usage threshold, the method provides removing the one of the permissions.