Patent ID: 8850041
Filing Date: 2014-09-30
Classification: G06F

Abstract:
1. In a multi-tenant environment including two or more tenants, wherein a management console provides administration services for each tenant and also stores data for each tenant, the data being stored in a manner that is secure to the tenant that owns the data, a method for defining administrative roles that specify administrative tasks that can be performed on the resources and data belonging to a tenant so that an administrator of the tenant may delegate a subset of the administrative tasks to a user associated with the tenant, the method comprising: identifying at the management console a plurality of administrative tasks that define privileged operations that an administrator of a tenant is authorized to perform on objects of the tenant; defining at the management console one or more administrative roles, by: assigning at the management console one or more users or groups of users to each of the at least one of the one or more administrative roles to thereby authorize the one or more users or groups of users assigned to each of the at least one of the one or more administrative roles to perform the one or more administrative tasks on the one or more target objects assigned to the corresponding administrative role to thereby enable an administrator of the tenant to delegate a subset of the plurality of administrative tasks to a user or group of users of the tenant.