Patent ID: 8671073

Claim:
A computer-implemented method comprising: storing, in a computer-readable medium, a first database including a first plurality of user identifiers (IDs) and corresponding privileges for accessing network resources associated with an organization; storing, in the computer-readable medium, a second database, different than the first database, including the first plurality of user IDs and the corresponding privileges for accessing the network resources associated with the organization; storing, in the computer-readable medium, a third database, different than the first database and second database, including a second plurality of user IDs associated with the organization; wherein the second plurality of user IDs stored in the third database identifies users that should have access to at least one of the network resources associated with an organization and wherein the third database does not store user IDs of any user that should not have access to the at least one of the network resources, or wherein the third database is not configured to store the corresponding privileges associated with each of the first plurality of user IDs for accessing the network resources associated with the organization; comparing the first plurality of user IDs stored in the second database with the second plurality of user IDs stored in the third database to determine a subset of the first plurality of user IDs that appear in the second database but not in the third database; and removing, from the first database, privileges associated with the subset of the first plurality of user IDs, that results from the comparing, that appear in the second database but not in the third database.