Patent ID: 8516107

Claim:
A computer-implemented method for monitoring one or more privileged activities in an enterprise, the method executed by one or more processors configured to perform a plurality of operations, the operations comprising: receiving account access information, wherein the account access information includes at least one physical user identifier identifying a physical user who has been granted privileged access to at least one enterprise resource, and a first timeframe for which the physical user was granted privileged access; receiving privileged activity information, wherein the privileged activity information includes one or more privileged activities performed at the at least one enterprise resource and a second timeframe for which the one or more privileged activities were performed; storing the account access information and the privileged activity information in a central data repository; receiving a request to retrieve at least a portion of the privileged account information or at least a portion of the account access information, wherein the request includes one or more of the physical user identifier, a resource identifier identifying the at least one enterprise resource, and the one or more privileged activities; identifying the first timeframe or the second timeframe associated with the one or more of the physical user identifier, a resource identifier identifying the at least one enterprise resource, and the one or more privileged activities included with the request; in response to the request, comparing the identified first timeframe or the second timeframe with the other of the first timeframe or the second timeframe; and retrieving, from the central data repository, the requested information based on the comparison.