Method and system for identifying data and managing access thereto across multiple data platforms
Systems and methods automate access and permissions to sensitive data or privileged data, by various users or entities, such as those associated with an enterprise, across multiple platforms.
1. A method for providing access to data between a plurality of platforms comprising:
in a first platform, identifying one or more data assets;
tagging each identified data asset from the first platform which meets a predetermined criterion;
in one or more subsequent platforms, identifying the one or more data assets;
for the data assets in the one or more subsequent platforms corresponding to the tagged data assets of the first platform, tagging the corresponding data assets of the one or more subsequent platforms;
for each tagged data asset in the first platform and the corresponding tagged data asset from the one or more subsequent platforms, identifying entities with permissions for the tagged data asset; and
for the tagged data asset in the one or more subsequent platforms, providing a suggestion of one or more rules for permissions to the tagged data asset, for the entities having permissions to the tagged data asset in the one or more subsequent platforms.
2. The method of claim 1 , wherein the providing the suggestion of one or more rules for permissions to the entities with permissions to the tagged data asset in the one or more subsequent platforms, includes, suggesting rules which correspond to the rules for permissions to the tagged data assets for entities with permissions to the tagged data asset in the first platform.
3. The method of claim 2 , wherein the permissions include access to the tagged data asset.
4. The method of claim 1 , wherein the plurality of platforms includes Software As A Service (SAAS) platforms.
5. The method of claim 1 , wherein the data assets in the one or more subsequent platforms corresponding to the tagged data assets of the first platform include the data assets which are either a representation term or content match with the tagged data assets of the first platform.
6. The method of claim 1 , wherein the corresponding data assets of the one or more subsequent platforms include matching data assets in the first platform.
7. A system for providing access to data between a plurality of platforms comprising:
a non-transitory storage medium for storing computer components; and
a computerized processor for executing the computer components comprising:
an identifying module for identifying one or more data assets in one or more data platforms;
a tagging module for tagging: 1) each identified data asset from a first data platform which meets a predetermined criterion, and 2) data assets in one or more subsequent data platforms corresponding to the tagged data assets of the first data platform;
a searching module for searching for data assets in the subsequent data platforms corresponding to the tagged data assets in the first data platform;
an identifying module for identifying entities with permissions for: 1) the tagged data asset in the first data platform, and 2) the corresponding tagged data asset in the one or more subsequent data platforms; and
a permission model for providing suggested rules for permissions for the entities to the tagged data assets in the one or more subsequent data platforms.
8. The system of claim 7 , wherein the permission model for providing the suggested rules which correspond to the rules for permissions to the entities to the corresponding tagged data asset include the permissions to the tagged data asset in the first data platform.
9. The system of claim 8 , wherein the rules for permissions include rules for access to the tagged data asset.
10. The system of claim 8 , wherein the data platforms include Software As A Service (SAAS) platforms.
11. The system of claim 7 , wherein the corresponding data assets of the one or more subsequent data platforms include matching data assets in the first platform.