Patent Document ID: 9596246
Application ID: 14600525

Base Claim:
1. A computer-implemented method for controlling access to data for an organization stored in an on-demand database system hosted on a server computer, the method comprising: enabling access to the data of the organization for a support representative associated with a management organization that maintains the data for the organization stored in an on-demand database system by the server computer generating a Security Assertion Markup Language (SAML) assertion upon a data access request by the support representative, the-SAML assertion establishing an identity of the support representative as a member of a support user class that is granted defined administrative privileges with respect to the data; initiating a network session to the organization upon the data access request of the support representative, wherein the network session associates the administrative privileges to the support user representative to enable access to the data to the extent of the administrative privileges; and granting access to an on-demand database application associated with the data to the support representative as an organization user for a limited term, the support representative being different from the organization user, wherein the support representative is granted use privileges of the on-demand database application for a limited term.

---

Claim 2:
2. The method of claim 1 wherein the data comprises at least one of: metadata related to usage parameters of the organization to resources of the system, and metadata of an application installed for use by the organization.