Patent ID: 8667578
Filing Date: 2014-03-04
Classification: G06F,H04L

Abstract:
1. In a computing environment, a method comprising: receiving a request to authorize a non-administrative user to perform an administrative action; accessing an authorization store, which is configured with information that corresponds to users and specified actions associated with those users, for determining whether the non-administrative user is allowed to perform the administrative action, wherein the authorization store provides a userscope variable that specifies a path for the non-administrative user, and wherein the path specified is automatically substituted for the non-administrative user based on a user login of the non-administrative user; in response to a determination that the non-administrative user is allowed to perform the administrative action, providing credentials that allow the non-administrative user to perform the administrative action using impersonation, wherein the credentials are specified for at least one of running the action as a process, running the action as a current user, or running the action as a specific user; running the administrative action; and upon completion of the administrative action, returning the non-administrative user to a set of credentials that were associated with that non-administrative user prior to running the administrative action.