Providing controlled access to admin credentials during a migration
View Patent ↗Access to admin credentials can be controlled during a migration. By controlling access to the admin credentials, a consultant can be allowed to perform migration tasks without the consultant being exposed to the administrative-level access necessary to perform such tasks. Accordingly, an organization can maintain complete control and visibility over the entire migration process, including how and when the admin credentials are used, while still being able to employ outside individuals or even inside individuals with reduced security or clearance levels in the process.
1. A method, implemented by a migration engine that is interposed between a source system and a target system to perform a migration of content from the source system to the target system, for providing controlled access to admin credentials during the migration, the method comprising:
receiving, from a consultant, a first request for first admin credentials that are required by the migration engine to perform one or more migration tasks on the source system, wherein the first admin credentials are required by the migration engine to perform the one or more migration tasks on the source system;
sending, to a first administrator, a request to submit the first admin credentials;
receiving, from the first administrator, the first admin credentials;
storing the first admin credentials in an identity database in association with a first identifier that indicates that the first admin credentials correspond to the source system;
receiving, from the consultant, a second request for second admin credentials that are required by the migration engine to perform one or more migration tasks on the target system;
sending, to a second administrator, a request to submit the second admin credentials;
receiving, from the second administrator, the second admin credentials;
storing the second admin credentials in the identity database in association with a second identifier that indicates that the second admin credentials correspond to the target system;
upon performing the one or more migration tasks on the source system, accessing the identity database to retrieve the first admin credentials;
employing the first admin credentials to perform the one or more migration tasks on the source system;
upon performing the one or more migration tasks on the target system, accessing the identity database to retrieve the second admin credentials; and
employing the second admin credentials to perform the one or more migration tasks on the target system.
2. The method of claim 1 , wherein the first request and the second request are one of the same request or different requests.
3. The method of claim 1 , wherein the request to submit the first admin credentials and the request to submit the second admin credentials are one of the same request or different requests.
4. The method of claim 1 , wherein the first admin credentials and the second admin credentials are one of the same admin credentials or different admin credentials.
5. The method of claim 1 , wherein the first and second administrators are one of the same administrator or different administrators.
6. The method of claim 1 , wherein the first request includes an identifier of the first administrator.
7. The method of claim 1 , wherein the first request is received from the consultant via a web console.
8. The method of claim 1 , wherein the request to submit the first admin credentials comprises a communication that includes a link to an interface within which the first admin credentials can be input.
9. The method of claim 1 , further comprising:
prior to performing at least one of the one or more migration tasks on the source system or at least one of the one or more tasks on the target system, sending, to one or more administrators, a request to provide approval to perform the at least one of the one or more migration tasks on the source system or the at least one of the one or more migration tasks on the target system; and
receiving the approval;
wherein, the first or second admin credentials are not employed to schedule or perform any migration tasks until approval is received.
10. The method of claim 9 , wherein the request to provide approval is sent in response to detecting that the at least one of the one or more migration tasks on the source system or the at least one of the one or more migration tasks on the target system require approval.
11. The method of claim 9 , wherein the request to provide approval is sent in response to the first request or the second request.
12. The method of claim 1 , wherein the request to submit the first or second admin credentials includes a request to provide approval of a proposed schedule for performing at least one of the one or more migration tasks on the source system or at least one of the one or more migration tasks on the target system, the method further comprising:
receiving, from the first or second administrator, the approval of the proposed schedule.
13. One or more non-transitory computer storage media storing computer executable instructions which when executed perform a method for providing controlled access to admin credentials during a migration, the method comprising:
displaying, to a consultant, one or more interfaces configured to receive configuration settings for configuring the migration engine to perform one or more migration tasks on one or both of a source system and a target system;
receiving, from the consultant and via the one or more interfaces, a first request for admin credentials corresponding to the source system;
in response to the first request, sending, to an administrator, a request to submit the admin credentials corresponding to the source system;
receiving, from the consultant and via the one or more interfaces, a second request for admin credentials corresponding to the target system;
in response to the second request, sending, to the administrator, a request to submit the admin credentials corresponding to the target system;
receiving, from the administrator, the admin credentials corresponding to the source system and the admin credentials corresponding to the target system;
storing, in an identity database, the admin credentials corresponding to the source system in association with an identifier of the source system and the admin credentials corresponding to the target system in association with an identifier of the target system;
upon performing a first migration task of the one or more migration tasks that requires accessing either or both the source or target systems, retrieving the corresponding admin credentials from the identity database; and
employing the corresponding admin credentials to perform the first migration task.
14. The computer storage media of claim 13 , wherein the first and second requests are one of the same request or different requests, and wherein the request to submit the admin credentials corresponding to the source system and the request to submit the admin credentials corresponding to the source system are one of the same request or different requests.
15. The computer storage media of claim 13 , wherein the first migration task employs both the admin credentials corresponding to the source system and the admin credentials corresponding to the target system.
16. The computer storage media of claim 13 , further comprising:
prior to performing the first migration task, sending, to the administrator, a request for approval to perform the first migration task;
receiving, from the administrator, the approval to perform the first migration task; and
wherein the corresponding admin credentials are retrieved and employed to perform the first migration task in response to receiving the approval.
17. A migration system comprising one or more hardware processors and one or more computer storage media storing computer executable instructions which when executed by the one or more hardware processors implement:
a migration engine configured to be interposed between a source system and a target system to perform a migration of content from the source system to the target system; and
an identity database for storing first admin credentials corresponding to the source system and second admin credentials corresponding to the target system;
wherein the migration engine is configured to receive input from a consultant that configures the migration engine to perform one or more migration tasks during the migration of content from the source system to the target system, and wherein at least one of the one or more migration tasks requires one or both of the first admin credentials or the second admin credentials; and
wherein the migration engine is further configured to receive one or more requests from the consultant for the first admin credentials and the second admin credentials, and in response, send one or more requests to one or more administrators for the first admin credentials and the second admin credentials such that, upon receiving the first and second admin credentials, the migration engine stores the first and second admin credentials in the identity database for subsequent retrieval when performing the at least one of the one or more migration tasks thereby enabling the migration engine to perform the at least one of the one or more migration tasks without receiving the first or second admin credentials from the consultant.
18. The migration system of claim 17 , wherein the migration engine is further configured to send a request to the one or more administrators for approval to perform the at least one of the one or more migration tasks, and to perform the at least one of the one or more migration tasks only after receiving the approval.