Patent ID: 9722987
Date: 2017-08-01
CPC Classifications: G06F,H04L

Claim:
1. A method in a computerized system comprising: collecting access-related configuration information from a plurality of entities in the computerized system; determining an access relationship between two or more entities based on the configuration information; storing, in a non-volatile storage, information about the determined access relationship, wherein the information identifies a source entity and a destination entity and the determined access relationship defines a user account associated with the source entity and authorized to log into the user account associated with the destination entity; defining a directory filter object; determining a first table to store at least one object representing a host with the directory filter object; determining a second table to store at least one object representing the user account with the directory filter object; and determining at least one user account on the host based upon identifying the directory filter object using the first table and identifying objects representing user accounts using the second table.