IP Library › Granted Patent US 12676865
Granted Patent B2
US 12676865 · App. 18/648,198 · Granted Jul 7, 2026

Platform access request management

Inventors: Ryan Killoran Bradley (Brooklyn, NY); Ishan Ajit Korde (Seattle, WA); Macy Michael Abbey (Portola Valley, CA); Anthony Wade Hatfield (Brooklyn, NY); Mihir Bhende (San Diego, CA); William Stone Potter (Somerville, MA)
H04L63/108H04L63/0815H04L63/104H04L63/20H04L2463/082
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12676865
App. No.
18/648,198
Granted
Jul 7, 2026
Kind
B2
Abstract

An administrator of an organization may create access policies within an access request management system which define relationships between resources and request-and-approval flows. For example, the administrator may create an access policy, and the access policy may be applied across multiple resources of the organization. The access policy may indicate rules that indicate characteristics of a request-and-approval flow for granting access to the corresponding resources. For example, the rules may indicate a duration to grant access to the users, a group of users that are eligible to request the resource, approving users that provide approval to the requesting user, and information to collect from the requesting users, among other examples.

Claims (60)

1 . A method for managing access requests to an access request management system, comprising:

receiving, from an administrator of the access request management system, a request to create an access policy, the access policy associated with granting users of the access request management system access to one or more resources, wherein the one or more resources comprise one or more applications, one or more user groups, one or more entitlement parameters, or a combination thereof,

generating the access policy based at least in part on receiving the request, wherein the access policy comprises one or more rules associated with granting the users access to the one or more resources for a duration;

receiving, from the administrator, an indication to add the one or more resources to the access policy;

receiving, from a user of the access request management system, a request to access a resource of the one or more resources;

granting the user access to the resource for the duration based at least in part on receiving the request, wherein granting the user access to the resource for the duration is in accordance with the one or more rules of the access policy;

receiving, from the user, a second request to grant a second user of the access request management system access to the resource, wherein the second user is different from the user; and

granting the second user access to the resource for the duration based at least in part on receiving the second request, wherein granting the second user access to the resource for the duration is in accordance with the one or more rules of the access policy.

2 . The method of claim 1 , further comprising:

displaying, based at least in part on receiving the request from the user to access the resource, a user interface associated with the access policy based at least in part on an identity of the user, the one or more rules of the access policy, or both.

3 . The method of claim 2 , further comprising:

receiving, based at least in part on displaying the user interface, one or more inputs from the user, wherein granting the user access to the resource is based at least in part on the one or more inputs.

4 . The method of claim 1 , further comprising:

displaying, to one or more users including the user, a user interface corresponding to a resource catalog, the resource catalog comprising a respective indicator for each of the one or more resources, wherein the respective indicator comprises a name associated with the resource, an icon associated with the resource, a description associated with the resource, or a combination thereof.

5 . The method of claim 4 , wherein the one or more rules of the access policy indicate a group of users capable of requesting access to the one or more resources, and wherein displaying the user interface corresponding to the resource catalog is based at least in part on the indicated group of users.

6 . The method of claim 4 , further comprising:

receiving, from the user based at least in part on displaying the user interface corresponding to the resource catalog, one or more inputs to the user interface, wherein receiving the request to access the resource is based at least in part on receiving the one or more inputs.

7 . The method of claim 4 , further comprising:

receiving, from the administrator, an indication to modify the name associated with the resource, the icon associated with the resource, the description associated with the resource, or a combination thereof.

8 . The method of claim 1 , further comprising:

transmitting, to a resource provider associated with the resource based at least in part on granting the user access to the resource, an indication that the user is granted access to the resource.

9 . The method of claim 8 , further comprising:

determining to grant the user access to the resource for the duration based at least in part on the one or more rules of the access policy; and

transmitting, to the resource provider, an indication of the duration associated with granting the user access to the resource.

10 . The method of claim 1 , further comprising:

receiving, from the user, a second request to access a plurality of resources associated with the access policy; and

granting the user access to each resource of the plurality of resources in accordance with the one or more rules of the access policy.

11 . An apparatus for managing access requests to an access request management system, comprising:

one or more memories storing processor-executable code; and

one or more processors coupled with the one or more memories and individually or collectively operable to execute the code to cause the apparatus to:

receive, from an administrator of the access request management system, a request to create an access policy, the access policy associated with granting users of the access request management system access to one or more resources, wherein the one or more resources comprise one or more applications, one or more user groups, one or more entitlement parameters, or a combination thereof;

generate the access policy based at least in part on receiving the request, wherein the access policy comprises one or more rules associated with granting the users access to the one or more resources for a duration;

receive, from the administrator, an indication to add the one or more resources to the access policy;

receive, from a user of the access request management system, a request to access a resource of the one or more resources;

grant the user access to the resource for the duration based at least in part on receiving the request, wherein granting the user access to the resource for the duration is in accordance with the one or more rules of the access policy;

receive, from the user, a second request to grant a second user of the access request management system access to the resource, wherein the second user is different from the user; and

grant the second user access to the resource for the duration based at least in part on receiving the second request, wherein granting the second user access to the resource for the duration is in accordance with the one or more rules of the access policy.

12 . The apparatus of claim 11 , wherein the one or more processors are individually or collectively further operable to execute the code to cause the apparatus to:

display, based at least in part on receiving the request from the user to access the resource, a user interface associated with the access policy based at least in part on an identity of the user, the one or more rules of the access policy, or both.

13 . The apparatus of claim 12 , wherein the one or more processors are individually or collectively further operable to execute the code to cause the apparatus to:

receive, based at least in part on displaying the user interface, one or more inputs from the user, wherein granting the user access to the resource is based at least in part on the one or more inputs.

14 . The apparatus of claim 11 , wherein the one or more processors are individually or collectively further operable to execute the code to cause the apparatus to:

display, to one or more users including the user, a user interface corresponding to a resource catalog, the resource catalog comprising a respective indicator for each of the one or more resources, wherein the respective indicator comprises a name associated with the resource, an icon associated with the resource, a description associated with the resource, or a combination thereof.

15 . The apparatus of claim 14 , wherein:

the one or more rules of the access policy indicate a group of users capable of requesting access to the one or more resources, and

displaying the user interface corresponding to the resource catalog is based at least in part on the indicated group of users.

16 . The apparatus of claim 14 , wherein the one or more processors are individually or collectively further operable to execute the code to cause the apparatus to:

receive, from the user based at least in part on displaying the user interface corresponding to the resource catalog, one or more inputs to the user interface, wherein receiving the request to access the resource is based at least in part on receiving the one or more inputs.

17 . The apparatus of claim 14 , wherein the one or more processors are individually or collectively further operable to execute the code to cause the apparatus to:

receive, from the administrator, an indication to modify the name associated with the resource, the icon associated with the resource, the description associated with the resource, or a combination thereof.

18 . The apparatus of claim 11 , wherein the one or more processors are individually or collectively further operable to execute the code to cause the apparatus to:

transmit, to a resource provider associated with the resource based at least in part on granting the user access to the resource, an indication that the user is granted access to the resource.

19 . A non-transitory computer-readable medium storing code for managing access requests to an access request management system, the code comprising instructions executable by one or more processors to:

receive, from an administrator of the access request management system, a request to create an access policy, the access policy associated with granting users of the access request management system access to one or more resources, wherein the one or more resources comprise one or more applications, one or more user groups, one or more entitlement parameters, or a combination thereof;

generate the access policy based at least in part on receiving the request, wherein the access policy comprises one or more rules associated with granting the users access to the one or more resources for a duration;

receive, from the administrator, an indication to add the one or more resources to the access policy;

receive, from a user of the access request management system, a request to access a resource of the one or more resources;

grant the user access to the resource for the duration based at least in part on receiving the request, wherein granting the user access to the resource for the duration is in accordance with the one or more rules of the access policy;

receive, from the user, a second request to grant a second user of the access request management system access to the resource, wherein the second user is different from the user; and

grant the second user access to the resource for the duration based at least in part on receiving the second request, wherein granting the second user access to the resource for the duration is in accordance with the one or more rules of the access policy.