Patent Publication Number: US-2023161824-A1

Title: Management of data access using a virtual reality system

Description:
BACKGROUND OF THE INVENTION 
     The present invention relates generally to the field of computer-generated virtual reality, and more particularly to computer data access management using a virtual reality system. 
     Gamification is the strategic attempt to enhance systems, services, organizations, and activities in order to create similar experiences to those experienced when playing games in order to motivate and engage users. This is generally accomplished through the application of game-design elements and game principles (dynamics and mechanics) in non-gaming contexts. It can also be defined as a set of activities and processes to solve problems by using or applying the characteristics of game elements. Gamification is part of persuasive system design, and it commonly employs game design elements to improve user engagement, organizational productivity, flow, learning, crowdsourcing, knowledge retention, employee recruitment and evaluation, ease of use, usefulness of systems, physical exercise, traffic violations, voter apathy, public attitudes about alternative energy, and more. A collection of research on gamification shows that a majority of studies on gamification find it has positive effects on individuals. 
     Virtual reality (VR) is a simulated experience that can be similar to or completely different from the real world. Applications of virtual reality include entertainment (e.g., video games), education (e.g., medical, or military training) and business (e.g., virtual meetings). Other distinct types of VR-style technology include augmented reality and mixed reality, sometimes referred to as extended reality (XR). Currently, standard virtual reality systems use either virtual reality headsets or multi-projected environments to generate realistic images, sounds and other sensations that simulate a user&#39;s physical presence in a virtual environment. A person using virtual reality equipment can look around the artificial world, move around in it, and interact with virtual features or items. The effect is commonly created by VR headsets consisting of a head-mounted display with a small screen in front of the eyes but can also be created through specially designed rooms with multiple large screens. Virtual reality typically incorporates auditory and video feedback but may also allow other types of sensory and force feedback through haptic technology. 
     SUMMARY 
     Embodiments of the present invention disclose a computer-implemented method, a computer program product, and a system for managing user access to data using a virtual reality environment, the computer-implemented method comprising: generating a virtual reality interface depicting visual representations mapped to corresponding documents, wherein the virtual reality interface provides a visual representation of mapped secondary users, and of mapped access controls; enabling a primary user to control secondary user access to documents contained in a repository; and responsive to receiving user gestures corresponding to the visual representations, updating the visual representation and the corresponding mapped documents. 
    
    
     
       BRIEF DESCRIPTION OF THE DRAWINGS 
         FIG.  1 A  is a functional block diagram illustrating a distributed data processing environment, in accordance with an embodiment of the present invention; 
         FIG.  1 B  is a functional block diagram illustrating a distributed data processing environment of a virtual reality data management system component, in accordance with an embodiment of the present invention; 
         FIG.  1 C  is a functional block diagram illustrating a distributed data processing environment of the virtual reality data management system component, in accordance with an embodiment of the present invention; 
         FIG.  2    illustrates operational steps of the virtual reality data management system component, on a server computer within the distributed data processing environment of  FIGS.  1 A- 1 C , for managing user data access using a virtual reality environment, in accordance with an embodiment of the present invention; and 
         FIG.  3    depicts a block diagram of components of the server computer executing the virtual reality data management system component within the distributed data processing environment of  FIGS.  1 A-  1 C , in accordance with an embodiment of the present invention. 
     
    
    
     DETAILED DESCRIPTION 
     Embodiments of the present invention recognize that files and folders are often stored in a document library, which may be hosted in a cloud storage system or local storage. Embodiments of the present invention recognize that in many scenarios, there is a need to grant access to a plurality of users with a plurality of different levels of access privileges (e.g., read access, write access, and/or admin access). Embodiments of the present invention recognize that granting access to a document, file, folder, and/or album may be required while simultaneously attending meeting, conversation, collaborative activities, and/or any other activities known and/or understood in the art. 
     Embodiments of the present invention recognize that in different scenarios, if a primary user (i.e., administrator) grants access to multiple users for different folders, files content, and/or any other data that requires permission access, then the activity can become mechanical, tedious and boring. Asset or data access management may be executed by a primary user, wherein the primary user may perform general role-based data asset access, where one such role could be executed by an administrator, a supervisor, a steward, a super user, an asset owner, a general user, and/or any other user that can perform data asset access known and understood in the art. Further, embodiments of the present invention recognize that while having a virtual reality interaction (e.g., virtual meeting), if a first user is instructed to grant a second user access to a file or folder, then the first user grants access to the file or folder while leveraging VR interaction. Additionally, embodiments recognize that gamification is needed for granting access to one or more users in any document repository. The gamification would be based on the VR experience created by the system as demonstrated in  FIG.  3   . For instance, to gain access to an asset (e.g., data), a user would need to virtually request access from the owner in order to walk through the “gate” guarding the files located within a library on a bookshelf behind the gate. In this instance, the gamified element(s) would be around requesting access, time to grant access, how long the gate would be held open, how long the user is granted access, and/or any other data access management elements known and understood in the art. Similarly, the owner of the asset would be able to place avatars, via the virtual reality environment, next to assets to “indicate” access has been granted, further the primary user (e.g., owner) would also be able to track access for the duration, by virtually tracking the activity of the people who were granted the access. 
     Embodiments of the present invention improve the art and solve the issues stated above by utilizing a virtual reality interface for controlling access to documents. Additionally, embodiments of the present invention improve the art and solve the issues stated above by (i) providing a virtual reality interface depicting visual representations mapping to corresponding entities that enable a first user to control access of a second user to documents contained in a repository, wherein the virtual reality interface provides a representation of the first user mapping to the second user, a representation of the documents mapping to the documents, and a representation of access controls mapping to access controls, and wherein the virtual reality interface supports gestures targeted to the representations for granting access, revoking access, adding documents, and removing documents; and (ii) updating the visual representation and the corresponding mapped entities based on received user gestures against the visual representation. Additionally, embodiments of the present invention improve the art and solve the issues stated above by utilizing compartments in the bookshelf to represent structures (e.g., folders) for holding documents, and providing a representation of roles corresponding to authorization privileges. In various embodiments, the visual representation is a virtual visual representation displayed in/or virtual reality and/or augmented reality devices. In various embodiments, the documents may represent books on a bookshelf, avatars representing users, and gates represent access controls. The virtual reality interface supported gestures may be, for example, a user using a hand to request access at the gate (like typing in request code at the gate), the asset owner using hands to assign avatars to assets, moving assets within a virtualized library from one shelf to another in order to indicate change in access entitlements (e.g., a public or protected asset becoming private). 
     Implementation of embodiments of the invention may take a variety of forms, and exemplary implementation details are discussed subsequently with reference to the Figures (i.e.,  FIG.  1 A - FIG.  3   ). 
       FIG.  1 A  is a functional block diagram illustrating a distributed data processing environment, generally designated  100 , in accordance with one embodiment of the present invention. The term “distributed” as used in this specification describes a computer system that includes multiple, physically distinct devices that operate together as a single computer system.  FIG.  1 A  provides only an illustration of one implementation and does not imply any limitations with regard to the environments in which different embodiments may be implemented. Many modifications to the depicted environment may be made by those skilled in the art without departing from the scope of the invention as recited by the claims. Distributed data processing environment  100  includes computing device  110  and server computer  120  interconnected over network  130 . 
     Network  130  may be, for example, a storage area network (SAN), a telecommunications network, a local area network (LAN), a wide area network (WAN), such as the Internet, a wireless technology for exchanging data over short distances (using short-wavelength ultra-high frequency (UHF) radio waves in the industrial, scientific and medical (ISM) band from 2.4 to 2.485 GHz from fixed and mobile devices, and building personal area networks (PANs) or a combination of the three), and may include wired, wireless, or fiber optic connections. Network  130  may include one or more wired and/or wireless networks that may receive and transmit data, voice, and/or video signals, including multimedia signals that include voice, data, text and/or video data. In general, network  130  may be any combination of connections and protocols that will support communications between computing device  110  and server computer  120 , and any other computing devices and/or storage devices (not shown in  FIG.  1 A ) within distributed data processing environment  100 . 
     In some embodiments of the present invention, computing device  110  may be, but is not limited to, a standalone device, a client, a server, a laptop computer, a tablet computer, a netbook computer, a personal computer (PC), a smart phone, a desktop computer, a smart television, a smart watch, a radio, a stereo system, a cloud based service (e.g., a cognitive cloud based service), AR glasses, a virtual reality headset, any HUD known in the art, and/or any programmable electronic computing device capable of communicating with various components and devices within distributed data processing environment  100 , via network  130  or any combination therein. In general, computing device  110  may be representative of any programmable computing device or a combination of programmable computing devices capable of executing machine-readable program instructions and communicating with users of other computing devices via network  130  and/or capable of executing machine-readable program instructions and communicating with server computer  120 . In some embodiments computing device  110  may represent a plurality of computing devices. 
     In some embodiments of the present invention, computing device  110  may represent any programmable electronic computing device or combination of programmable electronic computing devices capable of executing machine readable program instructions, manipulating executable machine-readable instructions, and communicating with server computer  120  and other computing devices (not shown) within distributed data processing environment  100  via a network, such as network  130 . Computing device  110  may include an instance of user interface (interface)  106 , and local storage  104 . In various embodiments, not depicted in  FIG.  1 A , computing device  110  may have a plurality of interfaces  106 . In other embodiments, not depicted in  FIG.  1 A , distributed data processing environment  100  may comprise a plurality of computing devices, plurality of server computers, and/or one a plurality of networks. Computing device  110  may include internal and external hardware components, as depicted, and described in further detail with respect to  FIG.  3   . 
     User interface (interface)  106  provides an interface to virtual reality integration (component)  122 . Computing device  110 , via user interface  106 , may enable a user and/or a client to interact with component  122  and/or server computer  120  in various ways, such as sending program instructions, receiving program instructions, sending and/or receiving messages, updating data, sending data, inputting data, editing data, collecting data, and/or receiving data. In one embodiment, interface  106  may be a graphical user interface (GUI) or a web user interface (WUI) and may display at least text, documents, web browser windows, user options, application interfaces, and instructions for operation. interface  106  may include data (such as graphic, text, and sound) presented to a user and control sequences the user employs to control operations. In another embodiment, interface  106  may be a mobile application software providing an interface between a user of computing device  110  and server computer  120 . Mobile application software, or an “app,” may be designed to run on smart phones, tablet computers and other computing devices. In an embodiment, interface  106  may enable the user of computing device  110  to at least send data, input data, edit data (annotations), collect data and/or receive data. 
     Server computer  120  may be a standalone computing device, a management server, a web server, a mobile computing device, one or more client servers, or any other electronic device or computing system capable of receiving, sending, and processing data. In other embodiments, server computer  120  may represent a server computing system utilizing multiple computers such as, but not limited to, a server system, such as in a cloud computing environment. In another embodiment, server computer  120  may represent a computing system utilizing clustered computers and components (e.g., database server computers, application server computers, etc.) that act as a single pool of seamless resources when accessed within distributed data processing environment  100 . Server computer  120  may include internal and external hardware components, as depicted, and described in further detail with respect to  FIG.  3   . In some embodiments server computer  120  may represent a plurality of server computers. 
     Each of shared storage  124  and local storage  104  may be a data/knowledge repository and/or a database that may be written and/or read by one or a combination of component  122 , server computer  120  and computing device  110 . In some embodiments, each of shared storage  124  and local storage  104  may be a data/knowledge repository, a knowledge base, a knowledge center, a knowledge corpus, and/or a database that may be written and/or read by one or a combination of component  122 , server computer  120  and computing device  110 . In the depicted embodiment, shared storage  124  resides on server computer  120  and local storage  104  resides on computing device  110 . In another embodiment, shared storage  124  and/or local storage  104  may reside elsewhere within distributed data processing environment  100 , provided that each may access and is accessible by computing device  110  and server computer  120 . Shared storage  124  and/or local storage  104  may each be implemented with any type of storage device capable of storing data and configuration files that may be accessed and utilized by server computer  120 , such as, but not limited to, a database server, a hard disk drive, or a flash memory. In various embodiments, not depicted in  FIG.  1 A , in addition to shared storage  124 , server computer comprises a primary and a secondary database, described below in  FIG.  3   . The primary database, also referred to as primary storage device, may be one or more of any type of disk storage known in the art. The secondary database, also referred to as secondary storage device, may be one or more any type of tape storage known in the art. 
     In the depicted embodiment, component  122  is executed on server computer  120 . In other embodiments, component  122  may be executed on computing device  110 . In various embodiments of the present invention, not depicted in  FIG.  1 A , component  122  may execute on a plurality of server computers  120  and/or on a plurality of computing devices  110 . In some embodiments, component  122  may be located and/or executed anywhere within distributed data processing environment  100  as long as component  122  is connected to and/or communicates with, computing device  110 , and/or server computer  120 , via network  130 . In the depicted embodiment, component  122  comprises contextual analysis engine  128 . 
     In various embodiments of the present invention, not depicted in  FIG.  1 A , knowledge corpus may each execute on a plurality of server computers  120  and/or on a plurality of computing devices  110 . In some embodiments, knowledge corpus may be located and/or executed anywhere within distributed data processing environment  100  if the knowledge corpus is connected to and/or communicates with, computing device  110 , component  122 , and/or server computer  120 , via network  130 . In various embodiments, component  122 , via contextual analysis engine  128 , creates one or more virtual reality visualizations (i.e., visualization/ virtual visualization) of the one or more captured images. In various embodiments of the present invention, contextual analysis engine  128  may each execute on a plurality of server computers  120  and/or on a plurality of computing devices  110 . In some embodiments, contextual analysis engine  128  may be located and/or executed anywhere within distributed data processing environment  100  as long as contextual analysis engine  128  are connected to and/or communicates with, computing device  110 , component  122 , and/or server computer  120 , via network  130 . 
     In various embodiments, while performing an activity in the physical world, a user can wear a VR device to visualize a virtual representation of a real-world location, event, experience, and/or scenario. Component  122  may create, through a virtual reality gamification system, virtual reality surroundings that enable access to an avatar of a candidate user. In various embodiments, while granting access to one or more files or folders for a specific user (i.e., a second user) or a group of users, component  122 , via a virtual reality system on a virtual reality device (e.g., computing device  110 ), creates a virtual realty user interface which generates and displays similar environment and/or virtual layouts of the one or more files and the one or more folders structure along with an access granting mechanism that will be provided to the admin with VR user interface. In various embodiments, component  122 , via computing device  110 , creates a virtual reality avatar of the candidate users who are requesting access to the data (e.g., files, folders, and/or any other forms of data known in the art with a user interface and administrative (admin) action in the virtual reality environment, wherein the admin can grant access to the avatar of the candidate users. Component  122  may create a virtual reality user interface of the data (e.g., files and folder structure), wherein component  122  may classify the documents or folders, and accordingly, component  122  creates a virtual reality visualization for the file and folders, and enable a primary user to grant access to the candidate users (i.e., secondary users). 
     In various embodiments, component  122  enables an admin to selectively revoke access to one or more users from accessing one or more files and folders, wherein component  122 , via computing device  110  (e.g., a VR system) creates and displays a user interface comprising administrator actions, and wherein the data access (i.e., access to the one or more files and/or folders) can be revoked. Component  122  may classify the virtual reality avatars of the users based on roles and responsibilities of the candidate users (i.e., secondary users), and accordingly output and display, via interface  106 , a visualization of the secondary users who are currently granted access to the files and folders. In various embodiments, responsive to receiving instructions from a user (e.g., administrator), component  122  selectively adds or removes one or more files and/or folders and accordingly, grant or revoke access to the files or folders in a selective manner. Based on interactions with a user (e.g., administrator) in the VR environment, component  122  may dynamically allocate and grant security access to a plurality of candidate users. In various embodiments, component  122  enables a user (e.g., an administrator) to assign security roles to secondary users based on interface  106  (e.g., virtual reality user interface), wherein the assigned security roles are visualized in the VR environment displayed, via computing device  110 , and wherein the user may grant or revoke secondary user access to one or more data mediums. 
     In various embodiments, component  122  creates an immersive user experience, in a virtual reality environment, for access management. Component  122  may identify files, folders, and/or user groups to which the access is to be provided and/or requested. In various embodiments, component  122  comprises contextual analysis engine  128 , wherein contextual analysis engine  128  analyzes where access (e.g., user access/permission) is provided. In various embodiments, if access is provided to a data medium (e.g., a file or folder), then contextual analysis engine  128  performs a contextual analysis of the content within the file/folder. Based on the contextual analysis, component  122  may identify one or more files and/or folders individually and classify the identified one or more files and/or folders. 
     In various embodiments, component  122  analyzes one or more data medium structures (e.g., file and folder structure) located on server computer  120  (e.g., cloud hosted server) and/or local storage  104 . Component  122  may create and display a visualization based on the analyzed one or more data medium structures (e.g., file and folder structure) and context of the data medium (e.g., documents or folder metadata within the file and folder structure). For example, a file and folder structure is depicted (i.e., visualized) as bookshelf in a Library, wherein each book is mapped to a file. In similar examples, in addition to managing access to files, component  122  considers content (e.g., code within a code repository on local storage  104  and/or shared storage  124 ), wherein the considered content is represented as a visualization in the virtual reality environment (e.g., represented as books with a library). Based on the contextual analysis of the content and data medium, component  122  may generate labels (e.g., names) and dynamically label each book virtually displayed on the visualized bookshelf, wherein each book corresponds to identified data medium (e.g., files and/or folders). In some embodiments, a folder structure may be organized as a room, or a shelf, wherein the virtual reality visualization creates individual rooms or passages with gates acting as access restriction points. 
     In some embodiments, files requiring administrator access may be virtually rendered with lock and/or chain, or comprising an interface to enable a user, via interface  106  and the user&#39;s avatar to enter an access code, wherein the user receives the access code from the admin upon receiving permission to access the restricted data medium (e.g., file and/or folder) from the administrator. In various embodiments, component  122  identifies and categorizes secondary users into two groups, wherein the first group comprises users who lack administrative access and/or are requesting administrative access to one or more data medium and the second group comprises users who have and/or have been granted administrative access, and wherein component  122  creates a virtual avatar of users in the second group. In some embodiments, the generated user avatars are predetermined, based on a preloaded user profile image, and/or are customizable by the user. 
     In various embodiments, component  233  may analyze the roles of a plurality of users and group the plurality of users based on the analysis. In some embodiments, if a user group does not exist for an identified role, then component  122  will create a new user group for the identified role. In various embodiment, component  122  creates a virtual reality interface for one or more user groups, wherein the one or more user groups can comprise multiple files and/or folder access. In some embodiments, component  122 , via computing device  110  (e.g., virtual reality system), creates and displays a user interface to virtually display the user group. In various embodiments, component  122  generates bookshelf visualization for file and folder structure or any other equivalent visualization. In some embodiments, if a secondary user or group of secondary users are identified for new access, then component  122  creates a visualization of the candidate users. In various embodiments, responsive to a primary user selectively identifying, engaging and/or granting access to one or more avatars of one or more secondary users, component  122  enables the selected secondary user to access a requested or predetermined data medium (i.e., grants access to one or more data medium visualizations (e.g., granting user access to one or more books, a group of books, one or more rooms, and/or any other generated visualizations)). In various embodiments, responsive to a user removing a corresponding avatar from the surrounding visualization, component  122  removes the granted permission from the user of the corresponding avatar. In some embodiments, component  122  generates and outputs a user interface corresponding to a particular situation. For example, if component  122  is interacting with a group of users, then component  122  will generate and virtually display a conference room comprising the users as the user interface, wherein the users are arranged in circle around the room or table and the conference room is named after the group of users or a predetermined name. 
     Component  122  may provide a virtual reality interface depicting visual representations mapping to corresponding entities that enable a first user to control access of a second user to documents contained in a repository, wherein the virtual reality interface provides a representation of the first user mapping to the second user, a representation of the documents mapping to the documents, and a representation of access controls mapping to access controls, and wherein the virtual reality interface supports gestures targeted to the representations for granting access, revoking access, adding documents, and removing documents. Further, component  122  may update the visual representation and the corresponding mapped entities based on received user gestures against the visual representation. Additionally, component  122  may improve the art and solve the issues stated above by utilizing compartments in the bookshelf to represent structures [e.g., folders] for holding documents, and providing a representation of roles corresponding to authorization privileges. In various embodiments, the documents may represent books on a bookshelf, avatars representing users, and gates represent access controls. 
       FIG.  1 B  is a functional block diagram illustrating a distributed data processing environment, generally designated  100 , in accordance with one embodiment of the present invention. The term “distributed” as used in this specification describes a computer system that includes multiple, physically distinct devices that operate together as a single computer system.  FIG.  1 B  provides only an illustration of one implementation and does not imply any limitations with regard to the environments in which different embodiments may be implemented. Many modifications to the depicted environment may be made by those skilled in the art without departing from the scope of the invention as recited by the claims. Distributed data processing environment  100  includes computing device  110 , user  140 , and server computer  120  interconnected over network  130 . 
     In the depicted embodiment, user  140  is wearing a virtual reality headset represented by computing device  110 . In other embodiments, computing device  110  may represent an augmented reality device and/or any other type or virtual reality device known and understood in the art. In the depicted embodiment, candidate users  142  (i.e., secondary users) submit access request  158  to access data medium  150  to user  140 . Component  122 , via contextual analysis engine  128 , analyzes data medium  150  and generates data medium visualization  152  based on the analyzed data medium  150 , wherein data medium visualization  152  is displayed with visualization  151  in user interface  106 . The displayed data medium visualization  152  and visualization  151  may map to corresponding entities that enable user  140  to control access of candidate users  142  to data contained in a repository (e.g., data medium  150 ), wherein the virtual reality interface (i.e., interface  106 ) provides a representation of user  140  mapping to candidate users  142 , a representation of the data mapping  148  to data medium  150 , and a representation of access controls  156  mapping to access controls  156 , and wherein the virtual reality interface (i.e., interface  106 ) supports gestures targeted to the representations for granting access, revoking access, adding documents, and removing documents. 
     User  140  may user interface  106  to interact with visualization  151  and respond to candidate users  142  access request  158 . Responsive to receiving instructions from user  140  to grant access to candidate users  142  to access data medium  150 , component  122  generates avatar  146  for each candidate users  142  who was granted access to data medium  150 . Component  122  may depict candidate users  142  in visualization  151  outside/in front of access restriction gate  144 , wherein candidate users  142  are users who lack access and/or are requesting access to data medium  150 . In the depicted embodiment, avatars  146  represent the avatars of users who have been granted access to data medium  150 , thus avatars  146  are depicted inside/behind access restriction gate  144  near/around data medium visualizations  152  (e.g., books and shelves). 
       FIG.  1 C  is a functional block diagram illustrating a distributed data processing environment, generally designated  100 , in accordance with one embodiment of the present invention. The term “distributed” as used in this specification describes a computer system that includes multiple, physically distinct devices that operate together as a single computer system.  FIG.  1 C  provides only an illustration of one implementation and does not imply any limitations with regard to the environments in which different embodiments may be implemented. Many modifications to the depicted environment may be made by those skilled in the art without departing from the scope of the invention as recited by the claims. Distributed data processing environment  100  includes computing device  110 , user  140 , and server computer  120  interconnected over network  130 . 
     More specifically,  FIG.  1 C , depicts an example of a virtual reality environment and user interface being displayed to a user (e.g., user  140 ), via computing device  110 , for managing user data access, in accordance with one embodiment of the invention. In the depicted embodiment, user  140  represents an administrator wearing computing device  110  (e.g., a virtual reality headset) and viewing a generated user interface (i.e., interface  106 ) through computing device  110 . Data medium  150  represent a files and folders structure that requires access to be granted by user  140 . Further, in the depicted embodiment, data medium  150  are virtually depicted as books and shelves in data medium visualizations  152  in a library within visualization  151 , wherein visualization  151  is displayed on interface  106  on computing device  110  to user  140 . Additionally, in the depicted embodiment, candidate users  142  are depicted/represented in visualization  151  outside/in front of access restriction gate  144 , wherein candidate users  142  are users who lack access and/or are requesting access to data medium  150 . In the depicted embodiment, avatars  146  represent the avatars of users who have been granted access to data medium  150 , thus avatars  146  are depicted inside/behind access restriction gate  144  near/around the books and shelves in data medium visualizations  152 . In various embodiments, if user  140  selects a user from candidate users  142  then component  122  generates an avatar for the selected user and the selected user is removed from candidate user  142  and the selected user avatar is displayed inside access restriction gate  144  near/around the books and shelves in data medium visualizations  152 . 
       FIG.  2    illustrates operational steps of component  122 , generally designated  200 , in communication with server computer  120 , within distributed data processing environment  100  of  FIG.  1 A  and/or  FIG.  1 B , for rendering objects in a peripheral viewing area as static, in accordance with an embodiment of the present invention.  FIG.  2    provides an illustration of one implementation and does not imply any limitations with regard to the environments in which different embodiments may be implemented. Many modifications to the depicted environment may be made by those skilled in the art without departing from the scope of the invention as recited by the claims. 
     In step  202 , component  122  analyzes one or more data medium. In various embodiments, component  122  analyzes one or more data medium on local storage  104  and/or shared storage  124 . In various embodiments, component  122  analyzes one or more data medium structures (e.g., file and folder structure) located on server computer  120  (e.g., cloud hosted server) and/or local storage  104 . 
     In step  204 , classifies the data medium. In various embodiments, component  122  may classify the data medium (e.g., documents or folders) and generate a virtual reality visualization of the classified data medium, wherein the generated virtual reality visualization enables a primary user (e.g., administrator) to grant access to the candidate users. 
     In step  206 , component  122  grants access to the data medium to a user. In various embodiments, responsive to receiving instructions from a primary user, component  122  grants access to one or more data medium to one or more users. 
     In step  208 , component  122  creates a virtual reality interface. In various embodiments, component  122  creates and displays a visualization based on the analyzed one or more data medium structures (e.g., file and folder structure) and context of the data medium (e.g., documents or folder metadata). For example, a file and folder structure is depicted (i.e., visualized) as bookshelf in a Library, wherein each book is mapped to a file. In similar examples, in addition to managing access to files, component  122  considers content (e.g., code within a code repository on local storage  104  and/or shared storage  124 ), wherein the considered content is represented as a visualization in the virtual reality environment (e.g., represented as books with a library). Based on the contextual analysis of the content and data medium, component  122  may generate labels (e.g., names) and dynamically label each book virtually displayed on the visualized bookshelf, wherein each book corresponds to identified data medium (e.g., files and/or folders). 
     In step  210 , creates an avatar of the user who was granted access to the data medium. In various embodiments, component  122  identifies and categorizes secondary users into two groups, wherein the first group comprises users who lack administrative access and/or are requesting administrative access to one or more data medium and the second group comprises users who have and/or have been granted administrative access, and wherein component  122  creates a virtual avatar of users in the second group. In some embodiments, the generated user avatars are a predetermined character, based on a preloaded user profile image, and/or are customizable by the user. In various embodiments, responsive to a primary user selectively identifying, engaging and/or granting access to one or more avatars of one or more secondary users, component  122  enables the selected secondary user to access a requested or predetermined data medium (i.e., grants access to one or more data medium visualizations (e.g., granting user access to one or more books, a group of books, one or more rooms, and/or any other generated visualizations)). 
     In step  212 , component  122  outputs a visualization of the generated virtual environment, user interface, and secondary user avatars. In various embodiments, component  122  displays similar environment and/or virtual layouts of the one or more files and the one or more folder&#39;s structure along with an access granting mechanism that will be provided to the admin with VR user interface. In various embodiments, component  122  displays responsive prompts to the user, via computing device  110 , that enable a user to confirm commands, execute commands, and/or input feedback. In various embodiments, component  122  generates and outputs, via interface  106 , responsive prompts that query the user to accept and/or rate the generated/output visualization, wherein responsive to receiving feedback from a user component  122  updates the output visualization based on the received user feedback and/or stores the user feedback and visualizations for future use to a knowledge corpus, shared storage  124 , and local storage  104 . 
       FIG.  3    depicts a block diagram of components of server computer  120  within distributed data processing environment  100  of  FIG.  1 A  and/or  FIG.  1 B , in accordance with an embodiment of the present invention. It should be appreciated that  FIG.  3    provides only an illustration of one implementation and does not imply any limitations with regard to the environments in which different embodiments may be implemented. Many modifications to the depicted environment may be made. 
       FIG.  3    depicts computer system  300 , where server computing  120  represents an example of computer system  300  that includes component  122 . The computer system includes processors  301 , cache  303 , memory  302 , persistent storage  305 , communications unit  307 , input/output (I/O) interface(s)  306 , display  309 , external device(s)  308  and communications fabric  304 . Communications fabric  304  provides communications between cache  303 , memory  302 , persistent storage  305 , communications unit  307 , and input/output (I/O) interface(s)  306 . Communications fabric  304  may be implemented with any architecture designed for passing data and/or control information between processors (such as microprocessors, communications, and network processors, etc.), system memory, peripheral devices, and any other hardware components within a system. For example, communications fabric  304  may be implemented with one or more buses or a crossbar switch. 
     Memory  302  and persistent storage  305  are computer readable storage media. In this embodiment, memory  302  includes random access memory (RAM). In general, memory  302  may include any suitable volatile or non-volatile computer readable storage media. Cache  303  is a fast memory that enhances the performance of processors  301  by holding recently accessed data, and data near recently accessed data, from memory  302 . 
     Program instructions and data used to practice embodiments of the present invention may be stored in persistent storage  305  and in memory  302  for execution by one or more of the respective processors  301  via cache  303 . In an embodiment, persistent storage  305  includes a magnetic hard disk drive. Alternatively, or in addition to a magnetic hard disk drive, persistent storage  305  may include a solid-state hard drive, a semiconductor storage device, read-only memory (ROM), erasable programmable read-only memory (EPROM), flash memory, or any other computer readable storage media that is capable of storing program instructions or digital information. 
     The media used by persistent storage  305  may also be removable. For example, a removable hard drive may be used for persistent storage  305 . Other examples include optical and magnetic disks, thumb drives, and smart cards that are inserted into a drive for transfer onto another computer readable storage medium that is also part of persistent storage  305 . 
     Communications unit  307 , in these examples, provides for communications with other data processing systems or devices. In these examples, communications unit  307  includes one or more network interface cards. Communications unit  307  may provide communications through the use of either or both physical and wireless communications links. Program instructions and data used to practice embodiments of the present invention may be downloaded to persistent storage  305  through communications unit  307 . 
     I/O interface(s)  306  enables for input and output of data with other devices that may be connected to each computer system. For example, I/O interface  306  may provide a connection to external devices  308  such as a keyboard, keypad, a touch screen, and/or some other suitable input device. External devices  308  may also include portable computer readable storage media such as, for example, thumb drives, portable optical or magnetic disks, and memory cards. Software and data used to practice embodiments of the present invention may be stored on such portable computer readable storage media and may be loaded onto persistent storage  305  via I/O interface(s)  306 . I/O interface(s)  306  also connect to display  309 . 
     Display  309  provides a mechanism to display data to a user and may be, for example, a computer monitor. 
     The programs described herein are identified based upon the application for which they are implemented in a specific embodiment of the invention. However, it should be appreciated that any particular program nomenclature herein is used merely for convenience, and thus the invention should not be limited to use solely in any specific application identified and/or implied by such nomenclature. 
     The present invention may be a system, a method, and/or a computer program product. The computer program product may include a computer readable storage medium (or media) having computer readable program instructions thereon for causing a processor to carry out aspects of the present invention. 
     The computer readable storage medium may be any tangible device that may retain and store instructions for use by an instruction execution device. The computer readable storage medium may be, for example, but is not limited to, an electronic storage device, a magnetic storage device, an optical storage device, an electromagnetic storage device, a semiconductor storage device, or any suitable combination of the foregoing. A non-exhaustive list of more specific examples of the computer readable storage medium includes the following: a portable computer diskette, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or Flash memory), a static random access memory (SRAM), a portable compact disc read-only memory (CD-ROM), a digital versatile disk (DVD), a memory stick, a floppy disk, a mechanically encoded device such as punch-cards or raised structures in a groove having instructions recorded thereon, and any suitable combination of the foregoing. A computer readable storage medium, as used herein, is not to be construed as being transitory signals per se, such as radio waves or other freely propagating electromagnetic waves, electromagnetic waves propagating through a waveguide or other transmission media (e.g., light pulses passing through a fiber-optic cable), or electrical signals transmitted through a wire. 
     Computer readable program instructions described herein may be downloaded to respective computing/processing devices from a computer readable storage medium or to an external computer or external storage device via a network, for example, the Internet, a local area network, a wide area network and/or a wireless network. The network may comprise copper transmission cables, optical transmission fibers, wireless transmission, routers, firewalls, switches, gateway computers and/or edge servers. A network adapter card or network interface in each computing/processing device receives computer readable program instructions from the network and forwards the computer readable program instructions for storage in a computer readable storage medium within the respective computing/processing device. 
     Computer readable program instructions for carrying out operations of the present invention may be assembler instructions, instruction-set-architecture (ISA) instructions, machine instructions, machine dependent instructions, microcode, firmware instructions, state-setting data, or either source code or object code written in any combination of one or more programming languages, including an object oriented programming language such as Smalltalk, C++ or the like, and conventional procedural programming languages, such as the “C” programming language or similar programming languages. The computer readable program instructions may execute entirely on the user&#39;s computer, partly on the user&#39;s computer, as a stand-alone software package, partly on the user&#39;s computer and partly on a remote computer or entirely on the remote computer or server. In the latter scenario, the remote computer may be connected to the user&#39;s computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or the connection may be made to an external computer (for example, through the Internet using an Internet Service Provider). In some embodiments, electronic circuitry including, for example, programmable logic circuitry, field-programmable gate arrays (FPGA), or programmable logic arrays (PLA) may execute the computer readable program instructions by utilizing state information of the computer readable program instructions to personalize the electronic circuitry, in order to perform aspects of the present invention. 
     Aspects of the present invention are described herein with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It will be understood that each block of the flowchart illustrations and/or block diagrams, and combinations of blocks in the flowchart illustrations and/or block diagrams, may be implemented by computer readable program instructions. 
     These computer readable program instructions may be provided to a processor of a general-purpose computer, a special purpose computer, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions/acts specified in the flowchart and/or block diagram block or blocks. These computer readable program instructions may also be stored in a computer readable storage medium that may direct a computer, a programmable data processing apparatus, and/or other devices to function in a particular manner, such that the computer readable storage medium having instructions stored therein comprises an article of manufacture including instructions which implement aspects of the function/act specified in the flowchart and/or block diagram block or blocks. 
     The computer readable program instructions may also be loaded onto a computer, other programmable data processing apparatus, or other device to cause a series of operational steps to be performed on the computer, other programmable apparatus, or other device to produce a computer implemented process, such that the instructions which execute on the computer, other programmable apparatus, or other device implement the functions/acts specified in the flowchart and/or block diagram block or blocks. 
     The flowchart and block diagrams in the Figures (i.e., FIG.) illustrate the architecture, functionality, and operation of possible implementations of systems, methods, and computer program products according to various embodiments of the present invention. In this regard, each block in the flowchart or block diagrams may represent a module, a segment, or a portion of instructions, which comprises one or more executable instructions for implementing the specified logical function(s). In some alternative implementations, the functions noted in the blocks may occur out of the order noted in the Figures. For example, two blocks shown in succession may, in fact, be executed substantially concurrently, or the blocks may sometimes be executed in the reverse order, depending upon the functionality involved. It will also be noted that each block of the block diagrams and/or flowchart illustration, and combinations of blocks in the block diagrams and/or flowchart illustration, may be implemented by special purpose hardware-based systems that perform the specified functions or acts or carry out combinations of special purpose hardware and computer instructions. 
     The descriptions of the various embodiments of the present invention have been presented for purposes of illustration but are not intended to be exhaustive or limited to the embodiments disclosed. Many modifications and variations will be apparent to those of ordinary skill in the art without departing from the scope and spirit of the invention. The terminology used herein was chosen to best explain the principles of the embodiment, the practical application or technical improvement over technologies found in the marketplace, or to enable others of ordinary skill in the art to understand the embodiments disclosed herein.