Patent ID: 11902335
Assignee: SAILPOINT TECHNOLOGIES, INC.
Field: Computer technology (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 0:
1. An identity management system, comprising:
a data store;
a processor;
a non-transitory, computer-readable storage medium, including computer instructions for:
obtaining identity management data from one or more identity management systems in a distributed enterprise computing environment, the identity management data comprising data on a set of entitlements and a set of identities, the set of entitlements and set of identities utilized in identity management in the distributed enterprise computing environment;
generating a role graph from the identity management data by:
creating a node of the role graph for each of a set of roles,
for each first role and second role that share at least one entitlement of the set of entitlements or at least one identity of the set of identities, creating an edge of the role graph between a first node representing the first role and a second node of the role graph representing the second role, and
generating a weight for each edge of the role graph between each first node representing the first role and second node representing the second role based on the at least one entitlement or the at least one identity shared between the first role represented by the first node and the second role represented by the second node;

presenting a metric or the role graph to a user through an interface, wherein the metric is an assessment of identity management associated with the distributed enterprise computing environment determined based on the role graph.