Patent ID: 11924220
Assignee: NETSKOPE, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 14:
15. A cloud network for policy based provisioning of user directory using a program and an interface, the cloud network comprising a plurality of servers, collectively having code for:
acquiring from a local application configured to execute on an end-user device, a plurality of user attributes for configuration of a user directory, wherein the plurality of user attributes includes email address, User Principal Name (UPN), and/or username of a plurality of end-users;
acquiring from the local application configured to execute on the end-user device, a plurality of groups associated with the plurality of end-users accessed by a plurality of end-user devices;
interacting with a mid-link server comprising a hardware server configured to provide a program module and a user interface accessible from the plurality of end-user devices;
wherein:
the program module integrates with an external application, and the user interface allows integration with the mid-link server,
the user interface leverages the program module, and
a snippet is created for the configuration of the user directory using the user interface for each of the plurality of end-users;
determining by the mid-link server, a set of user policies associated with the plurality of end-users;
determining by the mid-link server, a set of group policies associated with the plurality of groups;
determining by the mid-link server using the external application, a high-risk user from the plurality of end-users and adding the high-risk user to a group of high-risk users assigned with a lower set of privileges for the configuration, wherein specific policies are applied for the high-risk user, wherein a threat is determined associated with an end-user of the plurality of end-users based on a type of the threat, a threat level is determined based on the type of the threat, and the threat level is compared to a threshold level, the threshold level categorizes the end-user as the high-risk user;
assigning by the mid-link server, a higher set of privileges for the configuration to the plurality of end-users excluding the high-risk user; and
deploying by the mid-link server, the user directory using the snippet based on the set of user policies and the set of group policies, wherein the configuration of the user directory is based on the set of user policies and the set of group policies.