Network system and method for access management authentication and authorization

1. A method for automatically provisioning access privileges for a computing resource at a node in a computer network which includes a plurality of nodes, the method comprising:

receiving an access request for the computing resource at the node;

determining a service type and one or more validation criteria from information included in the access request, the service type being one of create, renew, modify, and revoke;

comparing the service type and the one or more validation criteria to a validation table;

determining if the access request is consistent with the validation table based on the comparison;

in response to determining the access request is consistent with the validation table:

automatically creating access privileges of a network user for the computing resource at the node without any user intervention when the service type is create;

automatically renewing the access privileges of the network user for the computing resource at the node without any user intervention when the service type is renew;

automatically modifying the access privileges of the network user for the computing resource at the node without any user intervention when the service type is modify; and

automatically revoking the access privileges of the network user for the computing resource at the node without any user intervention when the service type is revoke; and

transmitting a trigger to a network inventory system (NIS),

wherein the NIS comprises an information technology (IT) inventory server, and

wherein the access privileges for the computing resource comprise viewing, editing, and administrator privileges.

2. The method in claim 1 , further comprising:

transmitting a trigger to the computing resource to

compare the service type and the one or more validation criteria to the validation table, and

apply access privileges included in the access request for the network user to the computing resource.

3. The method in claim 2 , wherein the automatically creating, renewing, modifying, and revoking the access privileges of the network user for the computing resource at the node without any user intervention is executed by the computing resource in response to the trigger transmitted to the computing resource.

4. The method in claim 2 ,

wherein the trigger transmitted to the computing resource and the trigger transmitted to the NIS are sent by an automated approval application engine.

5. The method in claim 1 , wherein the computing resource comprises a database server located in an information technology (IT) domain.

6. The method in claim 1 , wherein the one or more validation criteria include at least one of an access type, a user type, a computing resource identification, an area of interest, and a subarea of interest.

7. A system for automatically provisioning access privileges for a node in a computer network that includes a plurality of nodes, the system comprising:

a memory and/or hardware processor; and

a network authentication and authorization (NA 3 ) controller that uses the memory and/or hardware processor in order to:

receive an access request for said node in the computer network;

determine a service type and one or more validation criteria from information included in the access request, the service type being one of create, renew, modify, and revoke;

transmit a trigger to a computing resource located at said node to compare the service type and the one or more validation criteria to validation criteria in a validation table, in order to determine if the access request is consistent with the validation table based on the comparison; and

transmit a further trigger to a network inventory system (NIS);

wherein in response to determining the access request is consistent with the validation table, the computing resource at said node automatically:

creates access privileges of a network user for the computing resource without any user intervention when the service type is create;

renews the access privileges of the network user for the computing resource without any user intervention when the service type is renew;

modifies the access privileges of the network user for the computing resource without any user intervention when the service type is modify; and

revokes the access privileges of the network user for the computing resource without any user intervention when the service type is revoke,

wherein the NIS comprises an information technology (IT) inventory server, and

wherein the access privileges for the node comprise viewing, editing, and administrator privileges.

8. The system in claim 7 , wherein the computing resource comprises a database server.

9. The system in claim 7 , wherein the one or more validation criteria include at least one of an access type, a user type, a computing resource identification, an area of interest, and a subarea of interest.

10. A non-transitory computer readable medium that stores instructions for automatically, without any user intervention, provisioning access privileges for a computing resource at a node in a computer network that includes a plurality of nodes comprising machine executable code which when executed by at least one computing device, causes the at least one computing device to perform steps comprising:

receiving an access request for the computing resource at the node;

determining a service type and one or more validation criteria from information included in the access request, the service type being one of create, renew, modify, and revoke;

comparing the service type and the one or more validation criteria to a validation table;

determining if the access request is consistent with the validation table based on the comparison;

in response to determining the access request is consistent with the validation table:

automatically creating access privileges of a network user for the computing resource at the node without any user intervention when the service type is create;

automatically renewing the access privileges of the network user for the computing resource at the node without any user intervention when the service type is renew;

automatically modifying the access privileges of the network user for the computing resource at the node without any user intervention when the service type is modify; and

automatically revoking the access privileges of the network user for the computing resource at the node without any user intervention when the service type is revoke; and

transmitting a trigger to a network inventory system (NIS),

wherein the NIS comprises an information technology (IT) inventory server, and

wherein the access privileges for the computing resource comprise viewing, editing, and administrator privileges.

11. The non-transitory computer readable medium in claim 10 , further causing the at least one computing device to perform steps comprising:

transmitting a trigger to the computing resource to

compare the service type and the one or more validation criteria to the validation table, and

apply access privileges included in the access request for the network user to the computing resource.

12. The non-transitory computer readable medium in claim 11 , wherein the automatically creating, renewing, modifying, and revoking the access privileges of the network user for the computing resource at the node without any user intervention is executed by the computing resource in response to the trigger.

13. The non-transitory computer readable medium in claim 11 ,

wherein the trigger transmitted to the computing resource and the trigger transmitted to the NIS are sent by an automated approval application engine.

14. The non-transitory computer readable medium in claim 10 , wherein the computing resource comprises a database server located in an information technology (IT) domain.