Patent ID: 9489390
Filing Date: 2016-11-08
CPC Classification: G06F,H04L

Claim Text:
1. A computer-implemented method for reconciling access rights provisioned for physical computing resources of a computer system, the method comprising: providing a database that implements an identity and access management (IAM) data model, the IAM data model defining a first relationship between a user entity and a physical entitlement specification entity and defining a second relationship between the physical entitlement specification entity and a physical computing resource entity; storing, at the database, (a) a user record conforming to the user entity, the user record corresponding to a user of a computing system, the computing system comprising one or more physical computing resources, (b) a set of physical computing resource records, each physical computing resource record conforming to the physical computing resource entity and corresponding to one of the computing resources, and (c) a set of physical entitlement specification records associated with the user record, each physical entitlement specification record conforming to the physical entitlement specification entity and identifying the user record, one of the physical computing resource records, and a permission to access one of the computing resources that corresponds to the physical computing resource record; receiving a request to reconcile access rights provisioned for the user; responsive to receipt of the request, initiating a reconciliation process, the reconciliation process comprising: