Patent ID: 11880484
Assignee: SALESFORCE, INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 0:
1. A computer implemented method for maintaining tenant-level data isolation in a system comprising a multi-tenant platform and a secondary platform, wherein the multi-tenant platform hosts tenant data of multiple tenants, the secondary platform is a cloud-based platform having a compute cluster configured to execute jobs, and the secondary platform does not provide tenant-level data isolation, the method comprising:
transferring tenant data of multiple tenants from the multi-tenant platform to the secondary platform;
receiving, by the multi-tenant platform, a job request from a client device of one of the multiple tenants;
executing the requested job on the secondary platform, comprising:
identifying, by the multi-tenant platform, a portion of tenant data stored on the secondary platform that is relevant for the job;
verifying, by the multi-tenant platform, that the tenant requesting the job has access to the identified portion of tenant data, causing the secondary platform to generate a job-level credential that permits access to the relevant portion of tenant data for a purpose of executing the job;
receiving, by the multi-tenant platform, from the secondary platform, the job-level credential; and
sending, from the multi-tenant platform to the secondary platform, a request to execute the job, causing the computer cluster of the secondary platform to access the relevant portion of tenant data using the job-level credential.