Method and apparatus for role grouping by shared resource utilization
Role search apparatus for grouping nodes according to relationships with other nodes, the apparatus including: an input for receiving an arrangement of nodes, the arrangement including at least two partitions of the nodes and with predetermined relationships between nodes across the partitions, and a pattern recognition unit associated with the input, for using pattern recognition on the nodes and the relationships to find relationship patterns amongst the nodes, thereby to form at least one group from nodes of a first of the partitions, wherein the nodes being formed into the group share relationships with same ones of a predetermined number of nodes in a second partition.
1. A method executed by at least one processor, comprising:
automatically analyzing existing links between a first set of users and a first set of resources;
in response to analyzing the existing links, automatically determining at least one group of resources, each group of the at least one group of resources comprising a respective plurality of resources that have at least one link to the first set of users in common, each group of the at least one group of resources not existing as a group prior to automatically analyzing the existing links; and
automatically determining at least one role in response to evaluating a homogeneity of the at least one group of resources, wherein the homogeneity of the at least one group of resources is evaluated by determining a set of percentages of occurrences of resource relationships for the resources in the at least one group of resources and summing the log values of each of the set of percentages of occurrences.
2. The method of claim 1 , wherein the links comprise access permissions.
3. The method of claim 2 , wherein the links further comprise user access permission levels for respective resources.
4. The method of claim 1 , wherein the at least one role is a user role.
5. The method of claim 1 , wherein the at least one group of resources are automatically determined by:
determining a second set of resources associated with a first user of the first set of users, the second set of resources comprising resources in the first set of resources; and
removing a third set of resources from the second set of resources in response to determining that the third set of resources are not associated with a second user of the first set of users, the second user associated with a fourth set of resources in the first set of resources.
6. The method of claim 1 , wherein automatically analyzing existing links between the first set of users and the first set of resources comprises performing iterative tree searching.
7. A system comprising:
at least one processor configured to:
automatically analyze existing links between a first set of users and a first set of resources;
in response to analyzing the existing links, automatically determine at least one group of resources, each group of the at least one group of resources comprising a respective plurality of resources that have at least one link to the first set of users in common, each group of the at least one group of resources not existing as a group prior to automatically analyzing the existing links; and
automatically determine at least one role by evaluating a homogeneity of the at least one group of resources, wherein the homogeneity of the at least one group of resources is evaluated by determining a set of percentages of occurrences of resource relationships for the resources in the at least one group of resources and summing the log values of each of the set of percentages of occurrences.
8. The system of claim 7 , wherein the links comprise access permissions.
9. The system of claim 8 , wherein the links further comprise user access permission levels for respective resources.
10. The system of claim 7 , wherein the at least one role is a user role.
11. The system of claim 7 , wherein the at least one processor is configured to automatically determine the at least one group of resources by:
determining a second set of resources associated with a first user of the first set of users, the second set of resources comprising resources in the first set of resources; and
removing a third set of resources from the second set of resources in response to determining that the third set of resources are not associated with a second user of the first set of users, the second user associated with a fourth set of resources in the first set of resources.
12. The system of claim 7 , wherein the at least one processor is configured to automatically analyze existing links between the first set of users and the first set of resources by performing iterative tree searching.
13. At least one non-transitory computer readable medium comprising instructions that, when executed by at least one processor, are configured to:
automatically analyze existing links between a first set of users and a first set of resources;
in response to analyzing the existing links, automatically determine at least one group of resources, each group of the at least one group of resources comprising a respective plurality of resources that have at least one link to the first set of users in common, each group of the at least one group of resources not existing as a group prior to automatically analyzing the existing links; and
automatically determine at least one role by evaluating a homogeneity of the at least one group of resources, wherein the homogeneity of the at least one group of resources is evaluated by determining a set of percentages of occurrences of resource relationships for the resources in the at least one group of resources and summing the log values of each of the set of percentages of occurrences.
14. The at least one non-transitory computer readable medium of claim 13 , wherein the links comprise access permissions.
15. The at least one non-transitory computer readable medium of claim 13 , wherein the links further comprise user access permission levels for respective resources.
16. The at least one non-transitory computer readable medium of claim 13 , wherein the at least one role is a user role.
17. The at least one non-transitory computer readable medium of claim 13 , wherein the instructions are configured to automatically determine the at least one group of resources by:
determining a second set of resources associated with a first user of the first set of users, the second set of resources comprising resources in the first set of resources; and
removing a third set of resources from the second set of resources in response to determining that the third set of resources are not associated with a second user of the first set of users, the second user associated with a fourth set of resources in the first set of resources.
18. The at least one non-transitory computer readable medium of claim 13 , wherein the instructions are configured to automatically analyze existing links between the first set of users and the first set of resources by performing iterative tree searching.