Role access to information assets based on risk model

1. A method of controlling access to a data object stored on a tangible device of a computer system comprising:

receiving, by a computer, a user request to access a data object;

identifying, by the computer, a role of the user wherein identifying the role of the user comprises:

assigning, by the computer, a role for the user that permits access to the computer system containing the data object based on how the user compares to other users in an enterprise hierarchy, wherein assigning, by the computer, the role for the user, based on how the user compares to other users in an enterprise hierarchy, comprises:

identifying one or more team members of the user having a role with a permission to access to the computer system;

identifying a role shared by a minimum number of the one or more team members; and

assigning for the requesting user, the identified role shared by the minimum number of the one or more team members to enable the requesting user with the permission to access to the computer system, only if the enterprise hierarchy level of the user has a minimum required distance from a root user and has a minimum required distance from an enterprise hierarchy level for the one or more team members;

determining, by the computer, a risk score representing a risk of disseminating the data object, wherein the risk score is based in part on a dimension value of the data object, wherein determining a risk score representing a risk of disseminating the data object, further comprises:

assigning one or more weight values to one or more numerical values associated with one or more dimensions of the data object, wherein the one or more weight values may be a numerical value;

multiplying the one or more weight values with the one or more numerical values associated with the one or more dimensions of the data object, to create one or more weight-dimension values corresponding to the one or more dimensions; and

aggregating the one or more weight-dimension values to create a risk score for the data object; and

controlling; by the computer, access to the data object, based on the role of the user, and the aggregated risk score associated with the risk of disseminating the data object, wherein

determining that the aggregated risk score of the data object is less than a pre-configured threshold value of the data object;

responsive to determining the aggregated risk score of the data object is less than a pre-configured threshold value, consulting an information governance catalog for the computer system, wherein the information governance catalog details access permissions to the one or more dimensions of the data object;

filtering the one or more dimensions of the data object based on the information governance catalog, wherein filtering the one or more dimensions comprises:

mapping the one or more dimensions of the data object that are accessible to the identified role being assigned to the user, based on the information governance catalog;

denoting, with a “true” value, the one or more dimensions of the data object that are accessible to the identified role of the user;

denoting, with a “false” value, the one or more dimensions of the data object that are not accessible to the identified role of the user; and

returning the one or more denoted dimensions comprising a “true” value as those dimensions that are accessible to the identified role of the user; and

allowing the user access to the one or more denoted dimensions of the data object that are filtered with the “true” value; otherwise

determining that the risk score of the data object is equal to or greater than the pre-configured threshold value of the data object; and

denying the user access to the data object.