Entitlement security and control
A system, apparatus, and method are provided for entitlement security and control. A method of embodiments of the invention includes granting an entitlement permission upon satisfaction of entitlement rules by an entitlement request.
1. One or more machine-readable storage medium having instructions stored thereon, which, when executed, cause a computing device to:
after an entitlement request for a computer user has been received at a computing device, grant an entitlement permission for the computer user upon satisfaction, by the entitlement request, of one or more predetermined entitlement rules for one or more computer resources of the computing device;
automatically generate an audit trail comprising information relating to the computer user receiving the entitlement permission;
track a change to one or more user characteristics of the computer user in one or more data sources; and
automatically update the audit trail to reflect the change to the one or more data sources.
2. The one or more machine-readable storage medium of claim 1 , wherein the information comprises information identifying one or more of the computer resources for which entitlement permission has been granted.
3. A method for managing computer data describing entitlement to access computer resources, the method comprising:
after an entitlement request for a computer user has been received at a computing device, granting an entitlement permission for the computer user upon satisfaction, by the entitlement request, of one or more predetermined entitlement rules for one or more computer resources of the computing device;
automatically generating, at the computing device, an audit trail comprising information relating to the computer user receiving the entitlement permission;
tracking a change to one or more user characteristics of the computer user in one or more data sources; and
automatically updating the audit trail to reflect the change to the one or more data sources.
4. The method of claim 3 , wherein the information comprises information identifying one or more of the computer resources for which entitlement permission has been granted.
5. A computer system comprising:
one or more processors;
one or more machine-readable storage medium having instructions stored thereon, which, when executed, cause the computer system to perform a method for managing computer data describing entitlement to access computer resources, the method comprising:
after an entitlement request for a computer user has been received at the computer system, granting an entitlement permission for the computer user upon satisfaction, by the entitlement request, of one or more predetermined entitlement rules for one or more computer resources of the computer system;
automatically generating, at the computer system, an audit trail comprising information relating to the computer user receiving the entitlement permission;
tracking a change to one or more user characteristics of the computer user in one or more data sources; and
automatically updating the audit trail to reflect the change to the one or more data sources.
6. The system of claim 5 , wherein the information comprises information identifying one or more of the computer resources for which entitlement permission has been granted.