Patent Document ID: 8336078
Application ID: 11484842

Base Claim:
1. A method for managing role-based access in a multi-customer computing environment, the method comprising: receiving, by a computing device, a request from an actor to take action within the multi-customer computing environment; determining, by the computing device, a role from one or more roles for the actor based on an identification of the actor, wherein each role is assigned a plurality of context parameters, each role is used by a plurality of customers, and the role that is determined can have a first policy element for the actor and a second policy element for a different actor, the first policy element and the second policy element are not the same; receiving, by the computing device, one value for each of the one or more context parameters assigned to the role based on the identification of the actor; determining, by the computing device, a role scope for the role based on the one value of each of the one or more context parameters assigned to the actor; determining, by the computing device, an actor-role scope value based on the role scope and the one value of each of the one or more context parameters assigned to the role; determining, by the computing device, a policy type based on the request from the actor and the actor's role and the one or more context parameters assigned to actor; populating, by the computing device, policy elements of the policy type to form a policy instance with one or more values from the one or more context parameters assigned to the role; and providing to the actor, by the computing device, an access permission for the first policy element or the second policy element so the actor can take action within the multi-customer computing environment based on the policy instance.

---

Claim 12:
12. The method of claim 1 wherein determining a role scope for the role further comprises selecting the role scope from a set of role scopes that are available for the role.