Patent ID: 9189644
Filing Date: 2015-11-17
Classification: G06F,G06Q,H04L

Abstract:
1. A computer-implemented method of provisioning access rights to physical computing resources comprising: receiving, at an access request handler, an access request that specifies a business role; identifying, at the access request handler, a set of logical permissions based, at least in part, on the access request wherein identifying the set of logical permissions comprises deriving, at the access request handler, a set of logical entitlements based, at least in part, on the set of logical permissions; translating, at an entitlement translator, the set of logical entitlements to a physical entitlement specification based, at least in part, on a set of physical permission specifications respectively associated with the set of logical permissions; and provisioning, using an access control manager, access rights to at least one physical computing resource indicated in the physical entitlement specification.