Reconciliation of Access Rights in a Computing System

摘要

Systems and methods are provide for reconciling access rights of a computing system are described. Access right information that respectively corresponds to access rights of a computing system may be obtained and evaluated. Reconciliation tasks may be performed using the access right information, and a reconciliation report may be generated during performance of at least one of the reconciliation tasks. The reconciliation report may indicate that one or more of the access rights should either be provisioned or revoked at the computing system.

主权项

1. A system for reconciling access rights of a computing system comprising:
at least one processor; and memory storing instructions that, when executed by the at least one processor, cause the system to
obtain access right information respectively corresponding to one or more access rights of a computing system;perform one or more reconciliation tasks using the access right information, andgenerate a reconciliation report during performance of one of the reconciliation tasks; wherein the reconciliation report indicates that one or more of the access rights should either be provisioned or revoked at the computing system; and wherein the one or more reconciliation tasks include a first reconciliation task associated with instructions stored at the memory that, when executed by the at least one processor, cause the system to
obtain an access report that identifies a plurality of users that are each associated with one of the access rights,obtain attribute information corresponding to one or more attributes of the plurality of users,select one of the users of the plurality of users,generate the reconciliation report based on a comparison between attribute information associated with the user selected and attribute information respectively associated with one or more other users of the plurality of users.