ACCESS PRIVILEGE REMOVAL BASED ON EFFICIENT ACCESS PRIVILEGE USAGE MONITORING FOR DATA ENVIRONMENTS
The technology disclosed herein enables removal of unused access privileges for data environments based on usage. In a particular example, a method provides accessing audit logs for a plurality of data environments. The audit logs indicate which permissions were used for the plurality of data enviro...
Gespeichert in:
Hauptverfasser: | , , |
---|---|
Format: | Patent |
Sprache: | eng |
Schlagworte: | |
Online-Zugang: | Volltext bestellen |
Tags: |
Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
|
Zusammenfassung: | The technology disclosed herein enables removal of unused access privileges for data environments based on usage. In a particular example, a method provides accessing audit logs for a plurality of data environments. The audit logs indicate which permissions were used for the plurality of data environments during and corresponding times in which the permissions were used. The method also provides aggregating the permissions into timeframes based on the corresponding times and tracking, in a database, a number of times each of the permissions was used in each of the timeframes. In response a one of the permissions satisfying a usage threshold, the method provides removing the one of the permissions. |
---|