Patent ID: 8918425
Filing Date: 2014-12-23
Classification: G06F,G06Q,H04L

Abstract:
1. A computer program product comprising a computer readable storage medium having a computer readable program stored therein, wherein the computer readable program, when executed on a data processing system, causes the data processing system to: receive a plurality of data objects representing one or more user identities, permissions, and resources of an organization computing system; receive one or more filter criteria for filtering the plurality of data objects to generate a subset of data objects for consideration during a role engineering project, wherein the one or more filter criteria specify a scope of the role engineering project, and wherein the role engineering project comprises generating one or more security roles that do not previously exist in an organization computing system; apply the one or more filter criteria to generate the subset of data objects; perform role engineering project operations on the subset of data objects to generate the one or more security roles; deploy the one or more security roles to the organization computing system to control access operations targeting resources of the organization computing system; and at least one of: merge at least one of the one or more filter criteria, the subset of data objects, or the one or more security roles of the role engineering project with at least one of filter criteria, data objects, or security roles of another role engineering project; or split the at least one of the one or more filter criteria, the subset of data objects, or the one or more security roles of the role engineering project into two or more sub-projects of the role engineering project.