Patent ID: 8831966
Filing Date: 2014-09-09
Classification: G06F,G06Q

Abstract:
1. A method for processing administration and delegation requests for resources in a hierarchically arranged plurality of computing resources using role-based validation and enforcement, the method comprising: providing, at a computer system, a hierarchically arranged plurality of roles including a first role, a second role, and a third role, wherein: providing the hierarchically arranged plurality of computing resources including a first computing resource and a second computing resource, wherein: receiving, at the computer system and from a first principal associated with the first role, a request to delegate the admin capabilty of the first resource to the third role; delegating, at the computer system, the admin capability of the first resource to the third role based at least in part on a determination that: receiving, at the computer system and from a second principal, a request to use the admin capability of the second resource in a second context; determining, at the computer system, that the second principal meets criteria for the second role in the second context, based at least in part on one or more role expressions that define the second role; determining that the second resource is not associated with any of the hierarchically arranged plurality of roles; traversing up the hierarchically arranged plurality of computing resources to identify the first computing resource; and allowing the second principal to use the admin capability of the second resource based on a determination that: