Patent Document ID: 20140129273
Application ID: 13668107
Patent Status: 0

Claim One:
1. A method comprising: generating a user list comprising a plurality of users and corresponding permission sets held by the plurality of users and not assigned to an existing role; and iteratively defining roles for the plurality of users, wherein iteratively defining the roles comprises: generating a cluster image that depicts cluster tendencies of the plurality of users in the user list, the cluster image comprising a cluster representing a subset of users with at least one common permission; selecting the cluster corresponding to the subset of the users in the user list; creating a role for the subset of users represented by the selected cluster; assigning a permission shared by at least two users in the subset of users to the role; assigning the role to the subset of users represented by the selected cluster; and updating the user list for a subsequent iteration, wherein updating the user list comprises removing the permission assigned to the role from the permission sets of the subset of users represented by the selected cluster.