Patent ID: 8086710

Claim:
A non-transitory computer readable storage medium comprising a program of machine-readable instructions executable by a digital processing apparatus to perform operations to migrate locally-managed identities to centrally-managed identities, the operations comprising: providing at least one interface control that enables a user to create a migration project; providing at least one interface control that enables a user to identify locally-managed identities associated with locally-managed groups in Unix; providing at least one interface control that enables a user to specify the migration of the locally-managed account groups to one or more centrally-managed account groups stored in Active Directory, wherein the migration of the locally-managed account groups migrates the locally-managed identities associated with the locally-managed account groups in Unix to the one or more centrally-managed account groups in Active Directory, and wherein the migration of the locally-managed account groups further preserve local group membership information and identity attributes about the locally-managed identities migrated to the one or more centrally-managed account groups; providing at least one interface control that enables a user to specify a plurality of migration rules for the migration project; providing at least one interface control that enables a user to specify a migration schedule for the migration project; and executing the migration rules according to the migration schedule too automatically migrate the locally-managed identities associated with the plurality of locally-managed account groups to the one or more centrally-managed account groups in a manner that preserves the local group membership information of migrated locally-managed identities.