Privilege management for electronic workspaces

1 . A privilege management method comprising:

receiving, by a processor and from a first user via a privileges plugin, a request to recommend a candidate to perform a task on behalf of the first user;

calculating, by the processor and responsive to the request to recommend the candidate, a recommendation score for each of a plurality of second users based on a position level score, a capability level score, a task similarity score, and a familiarity score, wherein the familiarity score is calculated based at least in part on a frequency of electronic communications between the first user and each of the second users, and wherein task similarity score is calculated based at least in part on a term frequency-inverse document frequency matrix representing words in a description of the task to be performed on behalf of the first user and words in a description of one or more tasks previously performed by each of the second users;

sending, by the processor, a list of recommended candidates to the first user via the privileges plugin, the list of recommended candidates including at least one of the second users for which the recommendation score is greater than a threshold score; and

granting, to one of the second users selected by the first user from the list of recommended candidates, one or more privileges for performing the task.

2 . The method of claim 1 , further comprising calculating the position level score for each of the second users based on a difference between a position level of the first user and a position level of each of the second users.

3 . The method of claim 1 , further comprising calculating the capability level score for each of the second users based on a capability level of each of the second users, the capability level representing an existing privilege held by each of the second users for performing the task.

4 . The method of claim 1 , wherein the recommendation score is a weighted sum of the position level score, the capability level score, the task similarity score, and the familiarity score.

5 . A computer program product including one or more non-transitory machine-readable mediums having instructions encoded thereon that when executed by at least one processor cause a process for managing privileges to be carried out, the process comprising:

receiving, from a first user via a privileges plugin, a request to recommend a candidate to perform a task on behalf of the first user;

calculating, responsive to the request to recommend the candidate, a recommendation score for each of a plurality of second users based on a position level score, a capability level score, a task similarity score, and a familiarity score, wherein the familiarity score is calculated based at least in part on a frequency of electronic communications between the first user and each of the second users, and wherein task similarity score is calculated based at least in part on a term frequency-inverse document frequency matrix representing words in a description of the task to be performed on behalf of the first user and words in a description of one or more tasks previously performed by each of the second users;

sending a list of recommended candidates to the first user via a privileges plugin, the list of recommended candidates including at least one of the second users for which the recommendation score is greater than a threshold score; and

granting, to one of the second users selected by the first user from the list of recommended candidates, one or more privileges for performing the task.

6 . The computer program product of claim 5 , wherein the process further comprises calculating the position level score for each of the second users based on a difference between a position level of the first user and a position level of each of the second users.

7 . The computer program product of claim 5 , wherein the process further comprises calculating the capability level score for each of the second users based on a capability level of each of the second users, the capability level representing an existing privilege held by each of the second users for performing the task.

8 . The computer program product of claim 5 , wherein the recommendation score is a weighted sum of the position level score, the capability level score, the task similarity score, and the familiarity score.

9 . A system comprising:

a storage; and

at least one processor operatively coupled to the storage, the at least one processor configured to execute instructions stored in the storage that when executed cause

the at least one processor to carry out a process for managing privileges, the process comprising:

receiving, from a first user via a privileges plugin, a request to recommend a candidate to perform a task on behalf of the first user;

calculating, responsive to the request to recommend the candidate, a recommendation score for each of a plurality of second users based on a position level score, a capability level score, a task similarity score, and a familiarity score, wherein the familiarity score is calculated based at least in part on a frequency of electronic communications between the first user and each of the second users, and wherein task similarity score is calculated based at least in part on a term frequency-inverse document frequency matrix representing words in a description of the task to be performed on behalf of the first user and words in a description of one or more tasks previously performed by each of the second users;

sending a list of recommended candidates to a privilege management service for display to the first user, the list of recommended candidates including at least one of the second users for which the recommendation score is greater than a threshold score; and

granting, to one of the second users selected by the first user from the list of recommended candidates, one or more privileges for performing the task.

10 . The system of claim 9 , wherein the process further comprises calculating the position level score for each of the second users based on a difference between a position level of the first user and a position level of each of the second users.

11 . The system of claim 9 , wherein the process further comprises calculating the capability level score for each of the second users based on a capability level of each of the second users, the capability level representing an existing privilege held by each of the second users for performing the task.